General
-
Target
951cb0160c564c0f92cf2021a975ba8e2a3ede22c71d0c587f0a2a0099d6f660N
-
Size
80KB
-
Sample
241027-ya98nssclj
-
MD5
6375d5ab94a770c3c86ec99605f067b0
-
SHA1
aae72a2cdd81b14b535417cf4686f0b0e1861083
-
SHA256
951cb0160c564c0f92cf2021a975ba8e2a3ede22c71d0c587f0a2a0099d6f660
-
SHA512
2cdaa52e283079a49d6ae1bf969fea2b572990d5c9eed7423db533e9f7c1cf935f1e78a788521c365d8261318dfb4c031f1168bfa78347f941c10fd4f85a99d3
-
SSDEEP
1536:UOzC0tKyIy9nOM8e5rqYJkdpzCEw2dnU4qvHH:UO9Ro2rqYyXzCEwGU
Static task
static1
Behavioral task
behavioral1
Sample
951cb0160c564c0f92cf2021a975ba8e2a3ede22c71d0c587f0a2a0099d6f660N.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
112.175.88.207
112.175.88.208
Targets
-
-
Target
951cb0160c564c0f92cf2021a975ba8e2a3ede22c71d0c587f0a2a0099d6f660N
-
Size
80KB
-
MD5
6375d5ab94a770c3c86ec99605f067b0
-
SHA1
aae72a2cdd81b14b535417cf4686f0b0e1861083
-
SHA256
951cb0160c564c0f92cf2021a975ba8e2a3ede22c71d0c587f0a2a0099d6f660
-
SHA512
2cdaa52e283079a49d6ae1bf969fea2b572990d5c9eed7423db533e9f7c1cf935f1e78a788521c365d8261318dfb4c031f1168bfa78347f941c10fd4f85a99d3
-
SSDEEP
1536:UOzC0tKyIy9nOM8e5rqYJkdpzCEw2dnU4qvHH:UO9Ro2rqYyXzCEwGU
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-