General
-
Target
e9ebd1526de38723c8b085e89df7a0cfd36c71ce341f3d39415b16ad509d9b6f
-
Size
62KB
-
Sample
250205-gqchxasrf1
-
MD5
d497443f4f5bbc3712ec75fdc06040a9
-
SHA1
3a1b844f52fda2df338a4c7e8c7431edd07afa77
-
SHA256
e9ebd1526de38723c8b085e89df7a0cfd36c71ce341f3d39415b16ad509d9b6f
-
SHA512
9ae9220ac266a733bedb7561a6caf4cfccd0985bb4f1364980edae3b83ed19deb1e3eba86d7b30ab09892c8d81092836484177cb94f97af124092650b3ee0441
-
SSDEEP
1536:aVeISHiT9tvJIH/H/FdP1TAPozIR6pWcaeCzY0:kUC5JWHv/ThlUovCzd
Static task
static1
Behavioral task
behavioral1
Sample
e9ebd1526de38723c8b085e89df7a0cfd36c71ce341f3d39415b16ad509d9b6f.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
112.175.88.209
112.175.88.207
112.175.88.208
Targets
-
-
Target
e9ebd1526de38723c8b085e89df7a0cfd36c71ce341f3d39415b16ad509d9b6f
-
Size
62KB
-
MD5
d497443f4f5bbc3712ec75fdc06040a9
-
SHA1
3a1b844f52fda2df338a4c7e8c7431edd07afa77
-
SHA256
e9ebd1526de38723c8b085e89df7a0cfd36c71ce341f3d39415b16ad509d9b6f
-
SHA512
9ae9220ac266a733bedb7561a6caf4cfccd0985bb4f1364980edae3b83ed19deb1e3eba86d7b30ab09892c8d81092836484177cb94f97af124092650b3ee0441
-
SSDEEP
1536:aVeISHiT9tvJIH/H/FdP1TAPozIR6pWcaeCzY0:kUC5JWHv/ThlUovCzd
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-