General
-
Target
62330b9026c956b6580fd086b2171bf50887fe298259ac0b7e53d9e019f59778
-
Size
333KB
-
Sample
241028-aafgaswemm
-
MD5
a08624aa8369a8873d683590fb3f0fed
-
SHA1
75cb37084b41f2cfc3d9e4ec990a19631375e2b4
-
SHA256
62330b9026c956b6580fd086b2171bf50887fe298259ac0b7e53d9e019f59778
-
SHA512
7431757670d2359ff3fe8a4ca2319ca09e1f3fafb769e3e6c91fdd47d69e978362fcea45995723435fd13bcc3b133a6300cba392659d6a068487d66023639088
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY9P:vHW138/iXWlK885rKlGSekcj66ciWP
Static task
static1
Behavioral task
behavioral1
Sample
62330b9026c956b6580fd086b2171bf50887fe298259ac0b7e53d9e019f59778.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
62330b9026c956b6580fd086b2171bf50887fe298259ac0b7e53d9e019f59778
-
Size
333KB
-
MD5
a08624aa8369a8873d683590fb3f0fed
-
SHA1
75cb37084b41f2cfc3d9e4ec990a19631375e2b4
-
SHA256
62330b9026c956b6580fd086b2171bf50887fe298259ac0b7e53d9e019f59778
-
SHA512
7431757670d2359ff3fe8a4ca2319ca09e1f3fafb769e3e6c91fdd47d69e978362fcea45995723435fd13bcc3b133a6300cba392659d6a068487d66023639088
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY9P:vHW138/iXWlK885rKlGSekcj66ciWP
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-