General
-
Target
67069ade38948696e890bb072ab04ead3cd06e00bb05f90f0fd72463e66380dd
-
Size
507KB
-
Sample
241101-jlfe4sydje
-
MD5
a9eaeb04e896a02140c7bbdbf5845a0e
-
SHA1
cbf857f9a0bf3a2db43d0320d3ea29f1914ac8c7
-
SHA256
67069ade38948696e890bb072ab04ead3cd06e00bb05f90f0fd72463e66380dd
-
SHA512
70dedcea8fcdbf85dc2eb9c40ec271ba207516b8074a4f8ba21d78dc1acb0c994e3d42d6d19af7e73d54e4dc6e2ce227d0f08cca1f6a439ffac43c322d642efc
-
SSDEEP
12288:Po7CGWcQSyYI2VrFKH5RBv9AQ1pEDdK5s:PMUv2LAv9AQ1p4dKC
Behavioral task
behavioral1
Sample
67069ade38948696e890bb072ab04ead3cd06e00bb05f90f0fd72463e66380dd.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
67069ade38948696e890bb072ab04ead3cd06e00bb05f90f0fd72463e66380dd
-
Size
507KB
-
MD5
a9eaeb04e896a02140c7bbdbf5845a0e
-
SHA1
cbf857f9a0bf3a2db43d0320d3ea29f1914ac8c7
-
SHA256
67069ade38948696e890bb072ab04ead3cd06e00bb05f90f0fd72463e66380dd
-
SHA512
70dedcea8fcdbf85dc2eb9c40ec271ba207516b8074a4f8ba21d78dc1acb0c994e3d42d6d19af7e73d54e4dc6e2ce227d0f08cca1f6a439ffac43c322d642efc
-
SSDEEP
12288:Po7CGWcQSyYI2VrFKH5RBv9AQ1pEDdK5s:PMUv2LAv9AQ1p4dKC
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-