General
-
Target
5b5541c8a94f98e38ebac66eb5009d36eea569c473be2b2396fe2489e8016893
-
Size
331KB
-
Sample
241028-3l5vjsxpht
-
MD5
2f0ef1635939f533b6748635655ec64a
-
SHA1
d11dea3716c70cc1d3958280a4b5093670fe4a87
-
SHA256
5b5541c8a94f98e38ebac66eb5009d36eea569c473be2b2396fe2489e8016893
-
SHA512
cb3d74d99dd0c5a2599ee836a1155ae7485483e6a4f5ebdab90e1f2dad917da66187ce2a9190659e7e9f18f4b6063d1d09f0e1f49aacbd5fa1329b081e05e0e6
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVn:vHW138/iXWlK885rKlGSekcj66ciEn
Static task
static1
Behavioral task
behavioral1
Sample
5b5541c8a94f98e38ebac66eb5009d36eea569c473be2b2396fe2489e8016893.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
5b5541c8a94f98e38ebac66eb5009d36eea569c473be2b2396fe2489e8016893
-
Size
331KB
-
MD5
2f0ef1635939f533b6748635655ec64a
-
SHA1
d11dea3716c70cc1d3958280a4b5093670fe4a87
-
SHA256
5b5541c8a94f98e38ebac66eb5009d36eea569c473be2b2396fe2489e8016893
-
SHA512
cb3d74d99dd0c5a2599ee836a1155ae7485483e6a4f5ebdab90e1f2dad917da66187ce2a9190659e7e9f18f4b6063d1d09f0e1f49aacbd5fa1329b081e05e0e6
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVn:vHW138/iXWlK885rKlGSekcj66ciEn
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-