General
-
Target
0e4b5515dcc549de7fbc86b0449d4644e5ee01b53406753e17feaea77b562244
-
Size
467KB
-
Sample
241026-w7tk3svnem
-
MD5
056c01f212d27f84ae5d05b8265587a8
-
SHA1
9337c21393f733f49b6ebdbd206bc587a26e235b
-
SHA256
0e4b5515dcc549de7fbc86b0449d4644e5ee01b53406753e17feaea77b562244
-
SHA512
e376f507171f36c9f842196b875ed85661f1dabe0e8ef76d1d99e286e9a22a94f83503b98485a95441ecdc0173e8f8134ecfbd48513a6fe97617c18da8e24de5
-
SSDEEP
12288:93CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mw:9x9GzHlTv/b35tecFB61
Behavioral task
behavioral1
Sample
0e4b5515dcc549de7fbc86b0449d4644e5ee01b53406753e17feaea77b562244.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
121.88.5.183
121.88.5.184
Targets
-
-
Target
0e4b5515dcc549de7fbc86b0449d4644e5ee01b53406753e17feaea77b562244
-
Size
467KB
-
MD5
056c01f212d27f84ae5d05b8265587a8
-
SHA1
9337c21393f733f49b6ebdbd206bc587a26e235b
-
SHA256
0e4b5515dcc549de7fbc86b0449d4644e5ee01b53406753e17feaea77b562244
-
SHA512
e376f507171f36c9f842196b875ed85661f1dabe0e8ef76d1d99e286e9a22a94f83503b98485a95441ecdc0173e8f8134ecfbd48513a6fe97617c18da8e24de5
-
SSDEEP
12288:93CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mw:9x9GzHlTv/b35tecFB61
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-