General
-
Target
4c8b83c5f240edc8cc09e42b226c7436486736e4c611dc3f546e734585fbf3c7
-
Size
57KB
-
Sample
241029-2lfpzsznew
-
MD5
a5c13234f79cb73a87fa089ce87bad5c
-
SHA1
3c97530bbf57d3e288a7d167e278814671ce7d46
-
SHA256
4c8b83c5f240edc8cc09e42b226c7436486736e4c611dc3f546e734585fbf3c7
-
SHA512
018a49fc6af84b7cdc030810d986f2af50c493aaad01c98b021d8e2485f8b1d1706c903234746aab497a6639d507d00c9fcd9483b3836296583acd8b0d0c59cb
-
SSDEEP
768:6b4zb59Yix/RoyH+5flZirYqc97vFvrpaZG3DHvTdA9GgnOuS5ZFYycKZpFZx5Er:6bQx5oPsr2vFxDPhAvzgAQzFZ77k
Static task
static1
Behavioral task
behavioral1
Sample
4c8b83c5f240edc8cc09e42b226c7436486736e4c611dc3f546e734585fbf3c7.exe
Resource
win7-20241023-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
4c8b83c5f240edc8cc09e42b226c7436486736e4c611dc3f546e734585fbf3c7
-
Size
57KB
-
MD5
a5c13234f79cb73a87fa089ce87bad5c
-
SHA1
3c97530bbf57d3e288a7d167e278814671ce7d46
-
SHA256
4c8b83c5f240edc8cc09e42b226c7436486736e4c611dc3f546e734585fbf3c7
-
SHA512
018a49fc6af84b7cdc030810d986f2af50c493aaad01c98b021d8e2485f8b1d1706c903234746aab497a6639d507d00c9fcd9483b3836296583acd8b0d0c59cb
-
SSDEEP
768:6b4zb59Yix/RoyH+5flZirYqc97vFvrpaZG3DHvTdA9GgnOuS5ZFYycKZpFZx5Er:6bQx5oPsr2vFxDPhAvzgAQzFZ77k
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-