General
-
Target
512b4841312b0df1fbbfacb0340330de82f46ea4e1e92d7dc89871f138ec5892N
-
Size
140KB
-
Sample
241027-vrwvts1bkl
-
MD5
cd314479dfad507b53e41939db3c2da0
-
SHA1
d536934b9eec4baacb72dac49cf9bb8ab29127a3
-
SHA256
512b4841312b0df1fbbfacb0340330de82f46ea4e1e92d7dc89871f138ec5892
-
SHA512
7728722fd804d690941c0dc129a2c940f8c92035d079985b5eedba06d9a2d2c6c95d7b59c055c0e057d6160a43a801c7f0e6c4c8ce38c6f9ea6ddc8a76f29f30
-
SSDEEP
1536:P/oEkqfCZ10zcT9Yh8AIXcjyz9cOXfiXGImcatMrsWjcdf6odgR5APfI4:P/5kqCxiXEcO3XfGf2tMUf6odgR5A44
Behavioral task
behavioral1
Sample
512b4841312b0df1fbbfacb0340330de82f46ea4e1e92d7dc89871f138ec5892N.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
512b4841312b0df1fbbfacb0340330de82f46ea4e1e92d7dc89871f138ec5892N
-
Size
140KB
-
MD5
cd314479dfad507b53e41939db3c2da0
-
SHA1
d536934b9eec4baacb72dac49cf9bb8ab29127a3
-
SHA256
512b4841312b0df1fbbfacb0340330de82f46ea4e1e92d7dc89871f138ec5892
-
SHA512
7728722fd804d690941c0dc129a2c940f8c92035d079985b5eedba06d9a2d2c6c95d7b59c055c0e057d6160a43a801c7f0e6c4c8ce38c6f9ea6ddc8a76f29f30
-
SSDEEP
1536:P/oEkqfCZ10zcT9Yh8AIXcjyz9cOXfiXGImcatMrsWjcdf6odgR5APfI4:P/5kqCxiXEcO3XfGf2tMUf6odgR5A44
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-