General
- Target 8c23b45d09e8362fc627df8e0bfd0592fdd2ea86681fb15e6b2944555ef17eef
- Size 408KB
- Sample260826-ksrx6ace38
- SHA256 8c23b45d09e8362fc627df8e0bfd0592fdd2ea86681fb15e6b2944555ef17eef
- MD5 541830aa47f1c70bb73b14f1f908ca64
- SHA1 b545fa8ebb5531de26735f3c14dceb91cbc0efca
- SHA512 ef2e51935cd570ea6faefd68b8f345f7ac0f9f8701a870f7c0c3a8d7f498b42fcfd53d24de8db4e1e01a792a6c9d979230eebf1b78e662ac5a94de16ece57353
- SSDEEP 6144:EY0NelwtPLU7IAHgfHKDAyioYO3BAd8VqcJw7cenzsNWfYB:EJdtPiAHWqyAIqcJYcezsf
- TLSH T1C3940115992049A0F7294B705A9BF9E84D894E3E21D8D58EF13CFD7AAC710C75A3314F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 8c23b45d09e8362fc627df8e0bfd0592fdd2ea86681fb15e6b2944555ef17eef
- Size 408KB
- SHA256 8c23b45d09e8362fc627df8e0bfd0592fdd2ea86681fb15e6b2944555ef17eef
- MD5 541830aa47f1c70bb73b14f1f908ca64
- SHA1 b545fa8ebb5531de26735f3c14dceb91cbc0efca
- SHA512 ef2e51935cd570ea6faefd68b8f345f7ac0f9f8701a870f7c0c3a8d7f498b42fcfd53d24de8db4e1e01a792a6c9d979230eebf1b78e662ac5a94de16ece57353
- SSDEEP 6144:EY0NelwtPLU7IAHgfHKDAyioYO3BAd8VqcJw7cenzsNWfYB:EJdtPiAHWqyAIqcJYcezsf
- TLSH T1C3940115992049A0F7294B705A9BF9E84D894E3E21D8D58EF13CFD7AAC710C75A3314F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE