General
-
Target
0430d47ffd2ba594f4d9c097f1196404088be865e3224d692a4aa5d43ea7f42aN
-
Size
446KB
-
Sample
241030-m56cesscqn
-
MD5
019dd5686e62593b1a205d4d1a4b85d0
-
SHA1
2e9ecbe2eb2d55692a299be7f155117284f077de
-
SHA256
0430d47ffd2ba594f4d9c097f1196404088be865e3224d692a4aa5d43ea7f42a
-
SHA512
c083b7175daca3d47ca5e6b723de9178367be5dc1cd6a49f2509649e245a73ff83ca05e52626c0971dda3bd1c176d2182c40b1a884c1963bf9b20e77c3e43460
-
SSDEEP
6144:PEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpoG:PMpASIcWYx2U6hAJQnS
Behavioral task
behavioral1
Sample
0430d47ffd2ba594f4d9c097f1196404088be865e3224d692a4aa5d43ea7f42aN.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
0430d47ffd2ba594f4d9c097f1196404088be865e3224d692a4aa5d43ea7f42aN
-
Size
446KB
-
MD5
019dd5686e62593b1a205d4d1a4b85d0
-
SHA1
2e9ecbe2eb2d55692a299be7f155117284f077de
-
SHA256
0430d47ffd2ba594f4d9c097f1196404088be865e3224d692a4aa5d43ea7f42a
-
SHA512
c083b7175daca3d47ca5e6b723de9178367be5dc1cd6a49f2509649e245a73ff83ca05e52626c0971dda3bd1c176d2182c40b1a884c1963bf9b20e77c3e43460
-
SSDEEP
6144:PEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpoG:PMpASIcWYx2U6hAJQnS
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-