General
-
Target
0f1afdd43419f1539f7b10612ca4ab3f2dcf000780475e0e89c224ede0c5269cN
-
Size
330KB
-
Sample
241026-h7vw9a1gqb
-
MD5
bb675c9e0bf8090c602b8e63a5fc8d30
-
SHA1
b16746c27c1769d8107b0809646ceee2b6a1b779
-
SHA256
0f1afdd43419f1539f7b10612ca4ab3f2dcf000780475e0e89c224ede0c5269c
-
SHA512
3185f510b80251fd4fe3baf81a4d42a7db84f77454118bf4d6ae872dec2cdea2b80f0ddbd54a54a83ed91e7d88becec374c36723156381355e9a919b7e011ef9
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVZ:vHW138/iXWlK885rKlGSekcj66ciEZ
Static task
static1
Behavioral task
behavioral1
Sample
0f1afdd43419f1539f7b10612ca4ab3f2dcf000780475e0e89c224ede0c5269cN.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
0f1afdd43419f1539f7b10612ca4ab3f2dcf000780475e0e89c224ede0c5269cN
-
Size
330KB
-
MD5
bb675c9e0bf8090c602b8e63a5fc8d30
-
SHA1
b16746c27c1769d8107b0809646ceee2b6a1b779
-
SHA256
0f1afdd43419f1539f7b10612ca4ab3f2dcf000780475e0e89c224ede0c5269c
-
SHA512
3185f510b80251fd4fe3baf81a4d42a7db84f77454118bf4d6ae872dec2cdea2b80f0ddbd54a54a83ed91e7d88becec374c36723156381355e9a919b7e011ef9
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVZ:vHW138/iXWlK885rKlGSekcj66ciEZ
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-