General
-
Target
b8be927711a68a75e15d0e63484a566b3a2c873df09a85d4729c187d7806ae04N
-
Size
326KB
-
Sample
241026-qgl6esskhn
-
MD5
dd9302be82e57d59ab5a6c4a424aa400
-
SHA1
df7211ed1d49b7cb0e1ea919137b83fc1ca944ab
-
SHA256
b8be927711a68a75e15d0e63484a566b3a2c873df09a85d4729c187d7806ae04
-
SHA512
aeb2261087939027844d5a488b7de6e3381e72dc7dceeaf27f07b8e2ce329535020245193a0ca5db091631cfded93b66786c546dba31fb0a46b09c2c93c14b01
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYf:vHW138/iXWlK885rKlGSekcj66cim
Static task
static1
Behavioral task
behavioral1
Sample
b8be927711a68a75e15d0e63484a566b3a2c873df09a85d4729c187d7806ae04N.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
b8be927711a68a75e15d0e63484a566b3a2c873df09a85d4729c187d7806ae04N
-
Size
326KB
-
MD5
dd9302be82e57d59ab5a6c4a424aa400
-
SHA1
df7211ed1d49b7cb0e1ea919137b83fc1ca944ab
-
SHA256
b8be927711a68a75e15d0e63484a566b3a2c873df09a85d4729c187d7806ae04
-
SHA512
aeb2261087939027844d5a488b7de6e3381e72dc7dceeaf27f07b8e2ce329535020245193a0ca5db091631cfded93b66786c546dba31fb0a46b09c2c93c14b01
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYf:vHW138/iXWlK885rKlGSekcj66cim
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-