General
-
Target
e40ac6982d1a3acb94f7bcf8fd221465cd799bb3ced7944d328fdf30778b23bfN
-
Size
65KB
-
Sample
241027-chs4gazpg1
-
MD5
bdfc6bfdef7c5435f691359d7eaa0860
-
SHA1
1a8dc8142fc1b2b7cba8a9502dc1203b2d9b20da
-
SHA256
e40ac6982d1a3acb94f7bcf8fd221465cd799bb3ced7944d328fdf30778b23bf
-
SHA512
c515bd3a6e375a47f5a23a6d8dd6ccf378420a06797692c7a8eb54f8350c2ebc93ff069afee7b9c59fe67fdcbd13bbdf46d0131472125c09974cf4f30e803a8d
-
SSDEEP
1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTmUD07yg:6bQRSHpAvzyf7MzeThD07yg
Static task
static1
Behavioral task
behavioral1
Sample
e40ac6982d1a3acb94f7bcf8fd221465cd799bb3ced7944d328fdf30778b23bfN.exe
Resource
win7-20240708-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
e40ac6982d1a3acb94f7bcf8fd221465cd799bb3ced7944d328fdf30778b23bfN
-
Size
65KB
-
MD5
bdfc6bfdef7c5435f691359d7eaa0860
-
SHA1
1a8dc8142fc1b2b7cba8a9502dc1203b2d9b20da
-
SHA256
e40ac6982d1a3acb94f7bcf8fd221465cd799bb3ced7944d328fdf30778b23bf
-
SHA512
c515bd3a6e375a47f5a23a6d8dd6ccf378420a06797692c7a8eb54f8350c2ebc93ff069afee7b9c59fe67fdcbd13bbdf46d0131472125c09974cf4f30e803a8d
-
SSDEEP
1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTmUD07yg:6bQRSHpAvzyf7MzeThD07yg
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-