General
-
Target
82ec056d7dd56179f06d3681c2b342a385d860b1885a1800f71e11be6d8653aaN
-
Size
272KB
-
Sample
241026-e5f4jaxmbj
-
MD5
ac8bf2e5d6913198ca725bcadd2850b0
-
SHA1
85e654d8996ff42801f7236d9a9491cc511898ba
-
SHA256
82ec056d7dd56179f06d3681c2b342a385d860b1885a1800f71e11be6d8653aa
-
SHA512
2b2874be2bc2250d7978a583e458066d78aff12d1162ecad998852a8f3c4352e0406f3fac730e275a141c7593dbac802ec6e271e6e7b6fc6ddb37f6d34513e7a
-
SSDEEP
3072:pp56zRJ83+OJ7NoGvdwWy6k04yW/KME0jj0e:pOzRWu27dlOd5W0r
Behavioral task
behavioral1
Sample
82ec056d7dd56179f06d3681c2b342a385d860b1885a1800f71e11be6d8653aaN.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
82ec056d7dd56179f06d3681c2b342a385d860b1885a1800f71e11be6d8653aaN
-
Size
272KB
-
MD5
ac8bf2e5d6913198ca725bcadd2850b0
-
SHA1
85e654d8996ff42801f7236d9a9491cc511898ba
-
SHA256
82ec056d7dd56179f06d3681c2b342a385d860b1885a1800f71e11be6d8653aa
-
SHA512
2b2874be2bc2250d7978a583e458066d78aff12d1162ecad998852a8f3c4352e0406f3fac730e275a141c7593dbac802ec6e271e6e7b6fc6ddb37f6d34513e7a
-
SSDEEP
3072:pp56zRJ83+OJ7NoGvdwWy6k04yW/KME0jj0e:pOzRWu27dlOd5W0r
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-