General
-
Target
7143351ed1b5ea93ab51df0efc9d8782cb96d0f4bd02044bc049cf31bceb6586
-
Size
52KB
-
Sample
250124-cqeaaavkft
-
MD5
8db76057a1f87b8e1f6c3c7440c9a5dc
-
SHA1
f18705ca70c159e89fee756b5f06ee9fec06ff87
-
SHA256
7143351ed1b5ea93ab51df0efc9d8782cb96d0f4bd02044bc049cf31bceb6586
-
SHA512
f03cc6855bf36647f33e95d3850a3f9e12fe5017f3812fcf5ba40b5216b2e3188590afdd15aa245d2165c00d1ddb29c6321cc00dbe990de02ffe6ae62878a1d0
-
SSDEEP
1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhPCB:KsdXfBo/DBJBGzkP5PCB
Static task
static1
Behavioral task
behavioral1
Sample
7143351ed1b5ea93ab51df0efc9d8782cb96d0f4bd02044bc049cf31bceb6586.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
121.88.5.183
218.54.28.139
Targets
-
-
Target
7143351ed1b5ea93ab51df0efc9d8782cb96d0f4bd02044bc049cf31bceb6586
-
Size
52KB
-
MD5
8db76057a1f87b8e1f6c3c7440c9a5dc
-
SHA1
f18705ca70c159e89fee756b5f06ee9fec06ff87
-
SHA256
7143351ed1b5ea93ab51df0efc9d8782cb96d0f4bd02044bc049cf31bceb6586
-
SHA512
f03cc6855bf36647f33e95d3850a3f9e12fe5017f3812fcf5ba40b5216b2e3188590afdd15aa245d2165c00d1ddb29c6321cc00dbe990de02ffe6ae62878a1d0
-
SSDEEP
1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhPCB:KsdXfBo/DBJBGzkP5PCB
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-