General
-
Target
2ea06962cf347329a322f6b0ffb8af20293b5ce5d39ae6279227c1d576dfc303N.exe
-
Size
76KB
-
Sample
250119-wf16vayney
-
MD5
77afbce8a229bea4c81fe1058f3681a0
-
SHA1
7447d2564fdd6bea1befc150d59c85b47c8c9f1f
-
SHA256
2ea06962cf347329a322f6b0ffb8af20293b5ce5d39ae6279227c1d576dfc303
-
SHA512
de10642ea552afe2f8fcc34e63af55dbfc1cfc94467f9845b25484997060125918b26a01ee46456d53ddf82b319526ab5184a14def0771088407fd227f4c57de
-
SSDEEP
1536:+Uk8RgDXz7Kx8zzgmTlvtKrNCpbXmsz4tHITjt:Tk8yn7KdmTINQXzz4ot
Static task
static1
Behavioral task
behavioral1
Sample
2ea06962cf347329a322f6b0ffb8af20293b5ce5d39ae6279227c1d576dfc303N.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
112.175.88.207
112.175.88.208
Targets
-
-
Target
2ea06962cf347329a322f6b0ffb8af20293b5ce5d39ae6279227c1d576dfc303N.exe
-
Size
76KB
-
MD5
77afbce8a229bea4c81fe1058f3681a0
-
SHA1
7447d2564fdd6bea1befc150d59c85b47c8c9f1f
-
SHA256
2ea06962cf347329a322f6b0ffb8af20293b5ce5d39ae6279227c1d576dfc303
-
SHA512
de10642ea552afe2f8fcc34e63af55dbfc1cfc94467f9845b25484997060125918b26a01ee46456d53ddf82b319526ab5184a14def0771088407fd227f4c57de
-
SSDEEP
1536:+Uk8RgDXz7Kx8zzgmTlvtKrNCpbXmsz4tHITjt:Tk8yn7KdmTINQXzz4ot
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-