General
-
Target
88fa590df4030e28590a4b542faeac7165d0c54a6f7fc7d0bd62341c5c60ec94.exe
-
Size
68KB
-
Sample
250125-b87twa1kak
-
MD5
8b5e9d3f1d95501f2dc371e77765f297
-
SHA1
3677bd1125433a3427bb4a4e83fb32aaf98fa445
-
SHA256
88fa590df4030e28590a4b542faeac7165d0c54a6f7fc7d0bd62341c5c60ec94
-
SHA512
83a5fe4382c4d6224a5e8ebc8c7005fb3a6f0f889d56f8c51801ef308155b752c49a29323ddf7d2ed8b45a7413876c2a2b9509ec9797c4dfe735a6c9ec2e9fbb
-
SSDEEP
1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCare:yLAYUzmdD0sMQl7d7IuhCaq
Static task
static1
Behavioral task
behavioral1
Sample
88fa590df4030e28590a4b542faeac7165d0c54a6f7fc7d0bd62341c5c60ec94.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
88fa590df4030e28590a4b542faeac7165d0c54a6f7fc7d0bd62341c5c60ec94.exe
-
Size
68KB
-
MD5
8b5e9d3f1d95501f2dc371e77765f297
-
SHA1
3677bd1125433a3427bb4a4e83fb32aaf98fa445
-
SHA256
88fa590df4030e28590a4b542faeac7165d0c54a6f7fc7d0bd62341c5c60ec94
-
SHA512
83a5fe4382c4d6224a5e8ebc8c7005fb3a6f0f889d56f8c51801ef308155b752c49a29323ddf7d2ed8b45a7413876c2a2b9509ec9797c4dfe735a6c9ec2e9fbb
-
SSDEEP
1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCare:yLAYUzmdD0sMQl7d7IuhCaq
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-