General
-
Target
115952ec8a3a073ab20b7df3a238a827b8fed5032be3e5c67d680230552121b8N
-
Size
552KB
-
Sample
241028-r4mwxazkcz
-
MD5
4489826c2eca1eb1a0123c0c46e6aca0
-
SHA1
1c006df93d42fa028e21a7f98c6ac8afc5198b25
-
SHA256
115952ec8a3a073ab20b7df3a238a827b8fed5032be3e5c67d680230552121b8
-
SHA512
b978da9070fb82166238114fb80f5b48acb6249a0854e5bc0fb695e759684f6e744282ff3c03c074ecf448b873d9993dd085e82c5e572b83b334c3a7435b0456
-
SSDEEP
12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gzl8:+rt4/NArwjs5ol8
Behavioral task
behavioral1
Sample
115952ec8a3a073ab20b7df3a238a827b8fed5032be3e5c67d680230552121b8N.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
Targets
-
-
Target
115952ec8a3a073ab20b7df3a238a827b8fed5032be3e5c67d680230552121b8N
-
Size
552KB
-
MD5
4489826c2eca1eb1a0123c0c46e6aca0
-
SHA1
1c006df93d42fa028e21a7f98c6ac8afc5198b25
-
SHA256
115952ec8a3a073ab20b7df3a238a827b8fed5032be3e5c67d680230552121b8
-
SHA512
b978da9070fb82166238114fb80f5b48acb6249a0854e5bc0fb695e759684f6e744282ff3c03c074ecf448b873d9993dd085e82c5e572b83b334c3a7435b0456
-
SSDEEP
12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gzl8:+rt4/NArwjs5ol8
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-