General
-
Target
ea6fa10a8cc8052b1fb60fe5a5351cbd590ea39e5a448662b31af1d71e7c8a56.exe
-
Size
92KB
-
Sample
250121-hq4sts1rbx
-
MD5
cf70e103d4070605ba7c73469dd62ba3
-
SHA1
3b7a744b5d2b72831ec560ba23b804daf87b16ba
-
SHA256
ea6fa10a8cc8052b1fb60fe5a5351cbd590ea39e5a448662b31af1d71e7c8a56
-
SHA512
54233286f7a81270b5439bd30f5cd61d6adf4eb125b77bd0d7044852123164d9109ebe73db2ced1d6d8528e3cdd468dde5726da940eeb9ddca99431892daafed
-
SSDEEP
1536:iDJj/L6UWX/iDdolO4g033dsA2+n1qn1iLdpl:iDJj29G4gItR7n1qn4LdT
Static task
static1
Behavioral task
behavioral1
Sample
ea6fa10a8cc8052b1fb60fe5a5351cbd590ea39e5a448662b31af1d71e7c8a56.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.77
218.54.47.74
Targets
-
-
Target
ea6fa10a8cc8052b1fb60fe5a5351cbd590ea39e5a448662b31af1d71e7c8a56.exe
-
Size
92KB
-
MD5
cf70e103d4070605ba7c73469dd62ba3
-
SHA1
3b7a744b5d2b72831ec560ba23b804daf87b16ba
-
SHA256
ea6fa10a8cc8052b1fb60fe5a5351cbd590ea39e5a448662b31af1d71e7c8a56
-
SHA512
54233286f7a81270b5439bd30f5cd61d6adf4eb125b77bd0d7044852123164d9109ebe73db2ced1d6d8528e3cdd468dde5726da940eeb9ddca99431892daafed
-
SSDEEP
1536:iDJj/L6UWX/iDdolO4g033dsA2+n1qn1iLdpl:iDJj29G4gItR7n1qn4LdT
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-