General
-
Target
4570022758d877a4058b10e2d7472ada3fd1be7e6af479040e2e7a7219491f8a
-
Size
62KB
-
Sample
241027-2jxkqa1rdy
-
MD5
9ba797f4c504c4c5851025279c7c42ae
-
SHA1
e95f0da7df452c324db3b134769339498aa98b14
-
SHA256
4570022758d877a4058b10e2d7472ada3fd1be7e6af479040e2e7a7219491f8a
-
SHA512
aada2a4c9e31b471635df9e82eee19108bde388b0dc763f5246adc276e04ba56254354514b64f793e6ebd534df8c0d37b0a6de873164758e7159badb7a61f930
-
SSDEEP
1536:saTkcl2v/z0thjkh6+uYLo31d0JuPrROVNs:Jo0cAthu6+FQ0JuPkNs
Static task
static1
Behavioral task
behavioral1
Sample
4570022758d877a4058b10e2d7472ada3fd1be7e6af479040e2e7a7219491f8a.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
4570022758d877a4058b10e2d7472ada3fd1be7e6af479040e2e7a7219491f8a
-
Size
62KB
-
MD5
9ba797f4c504c4c5851025279c7c42ae
-
SHA1
e95f0da7df452c324db3b134769339498aa98b14
-
SHA256
4570022758d877a4058b10e2d7472ada3fd1be7e6af479040e2e7a7219491f8a
-
SHA512
aada2a4c9e31b471635df9e82eee19108bde388b0dc763f5246adc276e04ba56254354514b64f793e6ebd534df8c0d37b0a6de873164758e7159badb7a61f930
-
SSDEEP
1536:saTkcl2v/z0thjkh6+uYLo31d0JuPrROVNs:Jo0cAthu6+FQ0JuPkNs
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-