General
-
Target
e8359c1b065cbad6c25945f39e031ba481d2727d2be43e04f76f52a26b043cfaN
-
Size
67KB
-
Sample
241028-sdxh4asclm
-
MD5
96b6d61a52490f9f803fb2f2fabddfd0
-
SHA1
72cf5e817bc5b582929fb70784ad7051d4d641b9
-
SHA256
e8359c1b065cbad6c25945f39e031ba481d2727d2be43e04f76f52a26b043cfa
-
SHA512
54a52557d7dd1f631c30bb386ba102f2a0ed371eb61487b97e690f93c7449dad5f8a83f891933676d4cc2bc0f35690fb16740f474ef0a15ec3f53c92a1ff9c95
-
SSDEEP
1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCare/:yLAYUzmdD0sMQl7d7IuhCai/
Static task
static1
Behavioral task
behavioral1
Sample
e8359c1b065cbad6c25945f39e031ba481d2727d2be43e04f76f52a26b043cfaN.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
e8359c1b065cbad6c25945f39e031ba481d2727d2be43e04f76f52a26b043cfaN
-
Size
67KB
-
MD5
96b6d61a52490f9f803fb2f2fabddfd0
-
SHA1
72cf5e817bc5b582929fb70784ad7051d4d641b9
-
SHA256
e8359c1b065cbad6c25945f39e031ba481d2727d2be43e04f76f52a26b043cfa
-
SHA512
54a52557d7dd1f631c30bb386ba102f2a0ed371eb61487b97e690f93c7449dad5f8a83f891933676d4cc2bc0f35690fb16740f474ef0a15ec3f53c92a1ff9c95
-
SSDEEP
1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCare/:yLAYUzmdD0sMQl7d7IuhCai/
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-