General
-
Target
fb581c355b684b49484e4792417cc298d5c194a36dea2b8c8a9e970ee54589de
-
Size
324KB
-
Sample
241027-dqagrs1mhw
-
MD5
ccb3964dd622fcc600a569de60895175
-
SHA1
ae99f1714cfe9c8811dbd0d6fa28d55189017d75
-
SHA256
fb581c355b684b49484e4792417cc298d5c194a36dea2b8c8a9e970ee54589de
-
SHA512
af877883057fee997f0da3f0cd229923ab221e6841b84062b5dadf08f42e4d00dd5a1de42a095d4bc51d9a3ecbd9041e952d55a8eb8e0d208fe5dfc563aaa35b
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYA:vHW138/iXWlK885rKlGSekcj66cil
Static task
static1
Behavioral task
behavioral1
Sample
fb581c355b684b49484e4792417cc298d5c194a36dea2b8c8a9e970ee54589de.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
fb581c355b684b49484e4792417cc298d5c194a36dea2b8c8a9e970ee54589de
-
Size
324KB
-
MD5
ccb3964dd622fcc600a569de60895175
-
SHA1
ae99f1714cfe9c8811dbd0d6fa28d55189017d75
-
SHA256
fb581c355b684b49484e4792417cc298d5c194a36dea2b8c8a9e970ee54589de
-
SHA512
af877883057fee997f0da3f0cd229923ab221e6841b84062b5dadf08f42e4d00dd5a1de42a095d4bc51d9a3ecbd9041e952d55a8eb8e0d208fe5dfc563aaa35b
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYA:vHW138/iXWlK885rKlGSekcj66cil
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-