General
-
Target
97e8f14b68a589239b11630fd1405b0d2ce6b84c8338842ce9c82f0b344106d2
-
Size
78KB
-
Sample
250206-cv2w5sslcj
-
MD5
944a5f9694369ae5c5cbae402c559d29
-
SHA1
2594ce819effa70ba6d0a5393b7a3488b3880bbe
-
SHA256
97e8f14b68a589239b11630fd1405b0d2ce6b84c8338842ce9c82f0b344106d2
-
SHA512
af5e85a23a20f45754f4d9deff54b681fb9b89fbabe1050b546ddf35dc4de34aa0c0911c408510eea8cc4e4e8e2236b0e31f2e6d417ff0ace67f85c796b64c48
-
SSDEEP
768:+sc7OdswlhnuXLhUQW5NPUFLuFdxm9MGVGkno5ksPCvEHH18TUBB/IwRfCZU9/7P:+9MJjCL2VlddeykkPCv8CqO+fC2c0
Static task
static1
Behavioral task
behavioral1
Sample
97e8f14b68a589239b11630fd1405b0d2ce6b84c8338842ce9c82f0b344106d2.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
112.175.88.208
112.175.88.207
Targets
-
-
Target
97e8f14b68a589239b11630fd1405b0d2ce6b84c8338842ce9c82f0b344106d2
-
Size
78KB
-
MD5
944a5f9694369ae5c5cbae402c559d29
-
SHA1
2594ce819effa70ba6d0a5393b7a3488b3880bbe
-
SHA256
97e8f14b68a589239b11630fd1405b0d2ce6b84c8338842ce9c82f0b344106d2
-
SHA512
af5e85a23a20f45754f4d9deff54b681fb9b89fbabe1050b546ddf35dc4de34aa0c0911c408510eea8cc4e4e8e2236b0e31f2e6d417ff0ace67f85c796b64c48
-
SSDEEP
768:+sc7OdswlhnuXLhUQW5NPUFLuFdxm9MGVGkno5ksPCvEHH18TUBB/IwRfCZU9/7P:+9MJjCL2VlddeykkPCv8CqO+fC2c0
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-