General
-
Target
54832d03a638bf9a63d65a0778c16b061a173026f28af0d1905e3312914c84eaN
-
Size
330KB
-
Sample
241029-l4wk6avajp
-
MD5
4f6be11ae13e3a9613b104c6dae342e0
-
SHA1
b7bb12bdbc37e6d802686bbac6cbd436d7839f9b
-
SHA256
54832d03a638bf9a63d65a0778c16b061a173026f28af0d1905e3312914c84ea
-
SHA512
1623449d81a95a88ea263b8fc54118820d80ff1729c97c3c16bb32044947ca37d6263dcb5a800e39f7b3205cf18316da7d18efbdc6edf1d9ce3a737d7e524222
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVv:vHW138/iXWlK885rKlGSekcj66ciEv
Static task
static1
Behavioral task
behavioral1
Sample
54832d03a638bf9a63d65a0778c16b061a173026f28af0d1905e3312914c84eaN.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
54832d03a638bf9a63d65a0778c16b061a173026f28af0d1905e3312914c84eaN
-
Size
330KB
-
MD5
4f6be11ae13e3a9613b104c6dae342e0
-
SHA1
b7bb12bdbc37e6d802686bbac6cbd436d7839f9b
-
SHA256
54832d03a638bf9a63d65a0778c16b061a173026f28af0d1905e3312914c84ea
-
SHA512
1623449d81a95a88ea263b8fc54118820d80ff1729c97c3c16bb32044947ca37d6263dcb5a800e39f7b3205cf18316da7d18efbdc6edf1d9ce3a737d7e524222
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVv:vHW138/iXWlK885rKlGSekcj66ciEv
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-