General
-
Target
67fbca0d1e899ec4b1148996488b1664b50601e4e452e98b41aa27a4e93a0616
-
Size
402KB
-
Sample
241025-2hxjbswaph
-
MD5
795df109157cb3019f46be982a65d77d
-
SHA1
78a49ed0afcf9ce48f164ca6f47f0d79b76aa1f1
-
SHA256
67fbca0d1e899ec4b1148996488b1664b50601e4e452e98b41aa27a4e93a0616
-
SHA512
5e0fa3f69d9ef541071d2ed3adfb9ff2117a5bdf4a970409f2b97db4a1a5152b5ddb3e69f274bb30635eff341c16004c699ef576ec76cb681427ff44c297eb7c
-
SSDEEP
6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBroh3:8IfBoDWoyFblU6hAJQnON
Behavioral task
behavioral1
Sample
67fbca0d1e899ec4b1148996488b1664b50601e4e452e98b41aa27a4e93a0616.exe
Resource
win7-20240729-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
67fbca0d1e899ec4b1148996488b1664b50601e4e452e98b41aa27a4e93a0616
-
Size
402KB
-
MD5
795df109157cb3019f46be982a65d77d
-
SHA1
78a49ed0afcf9ce48f164ca6f47f0d79b76aa1f1
-
SHA256
67fbca0d1e899ec4b1148996488b1664b50601e4e452e98b41aa27a4e93a0616
-
SHA512
5e0fa3f69d9ef541071d2ed3adfb9ff2117a5bdf4a970409f2b97db4a1a5152b5ddb3e69f274bb30635eff341c16004c699ef576ec76cb681427ff44c297eb7c
-
SSDEEP
6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBroh3:8IfBoDWoyFblU6hAJQnON
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-