General
-
Target
8221a4675d4839366cc13426056950a2742201f1da65cb7f8729d5017a16d178
-
Size
138KB
-
Sample
250119-ehbkjavrgr
-
MD5
cb8e65a5e75981aa5da1ab661821ee88
-
SHA1
e1334456b7bef3ebe043591dccecc0dfb41058f3
-
SHA256
8221a4675d4839366cc13426056950a2742201f1da65cb7f8729d5017a16d178
-
SHA512
a4307b8d867beee1a0502f4bf51e14c97e98e2f36a9811b37c40269735cafac1a23c065a3ac8fa84fd80df4c538fa83a73a4fb91b720fc03961623d6d081d673
-
SSDEEP
3072:VUhMsp+K1OXZjftqRO6DL/qHR4oBvsA7Ipr308dU4GU:VUhAOOt84Rh9KEi2U
Static task
static1
Behavioral task
behavioral1
Sample
8221a4675d4839366cc13426056950a2742201f1da65cb7f8729d5017a16d178.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
112.175.88.208
112.175.88.207
Targets
-
-
Target
8221a4675d4839366cc13426056950a2742201f1da65cb7f8729d5017a16d178
-
Size
138KB
-
MD5
cb8e65a5e75981aa5da1ab661821ee88
-
SHA1
e1334456b7bef3ebe043591dccecc0dfb41058f3
-
SHA256
8221a4675d4839366cc13426056950a2742201f1da65cb7f8729d5017a16d178
-
SHA512
a4307b8d867beee1a0502f4bf51e14c97e98e2f36a9811b37c40269735cafac1a23c065a3ac8fa84fd80df4c538fa83a73a4fb91b720fc03961623d6d081d673
-
SSDEEP
3072:VUhMsp+K1OXZjftqRO6DL/qHR4oBvsA7Ipr308dU4GU:VUhAOOt84Rh9KEi2U
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-