General
-
Target
4dd9cbea45573b466fea7b19445ee3cf60b300f5297f788a7ea8b3730b498a75
-
Size
356KB
-
Sample
241028-2znmrazbml
-
MD5
89280f71892759a8b5d330cbed1a6b9c
-
SHA1
94fc6560599b5020fb558500a094394a5c85af8c
-
SHA256
4dd9cbea45573b466fea7b19445ee3cf60b300f5297f788a7ea8b3730b498a75
-
SHA512
fed9aaf4e187023a341fbb4e785105b436d6f5d6501fa31b2841c87f65b06c37260dff6608671316783ad8dad84e620e190b87e0bfa686a821ad178d0ec03118
-
SSDEEP
6144:c1bYec5C8AAYLxhEmPG7qwmioqVsCqbN0h:MUyI6QmPPPqVsps
Behavioral task
behavioral1
Sample
4dd9cbea45573b466fea7b19445ee3cf60b300f5297f788a7ea8b3730b498a75.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
Targets
-
-
Target
4dd9cbea45573b466fea7b19445ee3cf60b300f5297f788a7ea8b3730b498a75
-
Size
356KB
-
MD5
89280f71892759a8b5d330cbed1a6b9c
-
SHA1
94fc6560599b5020fb558500a094394a5c85af8c
-
SHA256
4dd9cbea45573b466fea7b19445ee3cf60b300f5297f788a7ea8b3730b498a75
-
SHA512
fed9aaf4e187023a341fbb4e785105b436d6f5d6501fa31b2841c87f65b06c37260dff6608671316783ad8dad84e620e190b87e0bfa686a821ad178d0ec03118
-
SSDEEP
6144:c1bYec5C8AAYLxhEmPG7qwmioqVsCqbN0h:MUyI6QmPPPqVsps
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-