General
-
Target
a74cf49a83473e2508e72e43e4c125c58fe90e7f97aa2388c8288af387eb892e
-
Size
57KB
-
Sample
241026-bnyepsydnr
-
MD5
2650580371c8440f32cdc5bdd9c79063
-
SHA1
ca0db46389229205aa02074d4e2fb891ba985452
-
SHA256
a74cf49a83473e2508e72e43e4c125c58fe90e7f97aa2388c8288af387eb892e
-
SHA512
8939abd188726bfd230b62afa5ac24f7bc8bcabd5c2a97d3234819fae4c66067e8a9fa1fd4e373364d816f46c37305d5ca5f1f899c55878f3351eed4c78cac6a
-
SSDEEP
1536:amZ+4hcuX5uZ79jmvFQTXnz9yQ/PFBhl12:amZ+luXwy2f9LDhD2
Static task
static1
Behavioral task
behavioral1
Sample
a74cf49a83473e2508e72e43e4c125c58fe90e7f97aa2388c8288af387eb892e.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
a74cf49a83473e2508e72e43e4c125c58fe90e7f97aa2388c8288af387eb892e
-
Size
57KB
-
MD5
2650580371c8440f32cdc5bdd9c79063
-
SHA1
ca0db46389229205aa02074d4e2fb891ba985452
-
SHA256
a74cf49a83473e2508e72e43e4c125c58fe90e7f97aa2388c8288af387eb892e
-
SHA512
8939abd188726bfd230b62afa5ac24f7bc8bcabd5c2a97d3234819fae4c66067e8a9fa1fd4e373364d816f46c37305d5ca5f1f899c55878f3351eed4c78cac6a
-
SSDEEP
1536:amZ+4hcuX5uZ79jmvFQTXnz9yQ/PFBhl12:amZ+luXwy2f9LDhD2
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-