General
-
Target
7b632348a4cf480ea17052307d412c8d7ef5917e777ae9b674d43bae2fcafdd1N
-
Size
333KB
-
Sample
241029-blk2lasblk
-
MD5
ede94d90737c8fb49f5bd968f90d32b0
-
SHA1
b465d4e4a9074ef84ae72f958fc87c324562e65d
-
SHA256
7b632348a4cf480ea17052307d412c8d7ef5917e777ae9b674d43bae2fcafdd1
-
SHA512
31e15842f190d5cfd18ca7aca0ef44e583ed2d1b86af89a09d3e025402118c7a94ee21ee8bae2d76ff7e71cf40c95fa49c0cf88a0500477e5f2de45d50ae59dd
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYP:vHW138/iXWlK885rKlGSekcj66ci+
Static task
static1
Behavioral task
behavioral1
Sample
7b632348a4cf480ea17052307d412c8d7ef5917e777ae9b674d43bae2fcafdd1N.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
7b632348a4cf480ea17052307d412c8d7ef5917e777ae9b674d43bae2fcafdd1N
-
Size
333KB
-
MD5
ede94d90737c8fb49f5bd968f90d32b0
-
SHA1
b465d4e4a9074ef84ae72f958fc87c324562e65d
-
SHA256
7b632348a4cf480ea17052307d412c8d7ef5917e777ae9b674d43bae2fcafdd1
-
SHA512
31e15842f190d5cfd18ca7aca0ef44e583ed2d1b86af89a09d3e025402118c7a94ee21ee8bae2d76ff7e71cf40c95fa49c0cf88a0500477e5f2de45d50ae59dd
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYP:vHW138/iXWlK885rKlGSekcj66ci+
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-