General
- Target 9b54d9bf6ecd7918004a41d63e0f72da8fd84c02edf4aec06947ca44d8ac3277
- Size 64KB
- Sample260826-mna5yscj5v
- SHA256 9b54d9bf6ecd7918004a41d63e0f72da8fd84c02edf4aec06947ca44d8ac3277
- MD5 a9a8778a68e74fc54079df6ed8fbfb5d
- SHA1 47e558a3f53f3765ab1477a3821a9f99ca34014e
- SHA512 ac62e61acd49733a2d3ba14237a6482ac59817806dafa0f30910effd4cdc0c8e08d143fad0c29c187237fd3891fee4ab6bae95f1327420ec74c76bdfcab36ddf
- SSDEEP 1536:S5aNDur9V3Ke4MgCYnuJhiLxEQAj10O2+6hlO122d3:S5aNDw2Z3CxJsgj1fT6hqd3
- TLSH T1CA53CF84A38C4058F09E4FB04CD67242D4318E8685F29EB9AFE4F5CED8289992D75B3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.47.76
-
218.54.47.77
-
218.54.47.74
Targets
-
- Target 9b54d9bf6ecd7918004a41d63e0f72da8fd84c02edf4aec06947ca44d8ac3277
- Size 64KB
- SHA256 9b54d9bf6ecd7918004a41d63e0f72da8fd84c02edf4aec06947ca44d8ac3277
- MD5 a9a8778a68e74fc54079df6ed8fbfb5d
- SHA1 47e558a3f53f3765ab1477a3821a9f99ca34014e
- SHA512 ac62e61acd49733a2d3ba14237a6482ac59817806dafa0f30910effd4cdc0c8e08d143fad0c29c187237fd3891fee4ab6bae95f1327420ec74c76bdfcab36ddf
- SSDEEP 1536:S5aNDur9V3Ke4MgCYnuJhiLxEQAj10O2+6hlO122d3:S5aNDw2Z3CxJsgj1fT6hqd3
- TLSH T1CA53CF84A38C4058F09E4FB04CD67242D4318E8685F29EB9AFE4F5CED8289992D75B3D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE