General
-
Target
ebeb9c2dfb245469c098b44ab92b8d51423af56124b7106d26a4416848ab259cN.exe
-
Size
57KB
-
Sample
250120-aqvwxssncz
-
MD5
903bdeb7bfe975ec89c96907ec4865d0
-
SHA1
d70b5a7a4fc423d087ac5c54fa9c65ac33a357d6
-
SHA256
ebeb9c2dfb245469c098b44ab92b8d51423af56124b7106d26a4416848ab259c
-
SHA512
0b3e651aac161a3a3fad06c3367c4ed6e8b1060ad3d9eac6e7b2071ccfd06a3ab43c213a347211df02734fa71c1c6a54660c42616ee20203120228f37288622a
-
SSDEEP
1536:amZ+4hcuX5uZ79jmvFQTXnz9yQ/PFBhl1I:amZ+luXwy2f9LDhDI
Static task
static1
Behavioral task
behavioral1
Sample
ebeb9c2dfb245469c098b44ab92b8d51423af56124b7106d26a4416848ab259cN.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
ebeb9c2dfb245469c098b44ab92b8d51423af56124b7106d26a4416848ab259cN.exe
-
Size
57KB
-
MD5
903bdeb7bfe975ec89c96907ec4865d0
-
SHA1
d70b5a7a4fc423d087ac5c54fa9c65ac33a357d6
-
SHA256
ebeb9c2dfb245469c098b44ab92b8d51423af56124b7106d26a4416848ab259c
-
SHA512
0b3e651aac161a3a3fad06c3367c4ed6e8b1060ad3d9eac6e7b2071ccfd06a3ab43c213a347211df02734fa71c1c6a54660c42616ee20203120228f37288622a
-
SSDEEP
1536:amZ+4hcuX5uZ79jmvFQTXnz9yQ/PFBhl1I:amZ+luXwy2f9LDhDI
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-