General
-
Target
1feeeddd0aa1b1341e96df8e53dd2d0463381912904963010457eb64fed5d7f9N
-
Size
330KB
-
Sample
241026-act3gaxglp
-
MD5
1a26985e3b7ebd599e917917c69ca6c0
-
SHA1
7677bc55939679a99053a9c9f795a63e717176b2
-
SHA256
1feeeddd0aa1b1341e96df8e53dd2d0463381912904963010457eb64fed5d7f9
-
SHA512
018e9d5154c48ced5cb6506075e52cc3d65e96372ab6b40ca70e1d7c0555ec7c0a36a2ea7b860211f63e0f83edde28f9aae32cc658af650edcfbab74675eeaea
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVP:vHW138/iXWlK885rKlGSekcj66ciEP
Static task
static1
Behavioral task
behavioral1
Sample
1feeeddd0aa1b1341e96df8e53dd2d0463381912904963010457eb64fed5d7f9N.exe
Resource
win7-20240708-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
1feeeddd0aa1b1341e96df8e53dd2d0463381912904963010457eb64fed5d7f9N
-
Size
330KB
-
MD5
1a26985e3b7ebd599e917917c69ca6c0
-
SHA1
7677bc55939679a99053a9c9f795a63e717176b2
-
SHA256
1feeeddd0aa1b1341e96df8e53dd2d0463381912904963010457eb64fed5d7f9
-
SHA512
018e9d5154c48ced5cb6506075e52cc3d65e96372ab6b40ca70e1d7c0555ec7c0a36a2ea7b860211f63e0f83edde28f9aae32cc658af650edcfbab74675eeaea
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVP:vHW138/iXWlK885rKlGSekcj66ciEP
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-