General
-
Target
896af404b97206a74df3d1213c8b1c5657f0fbbc207aeb4ac30864df5faf3afe
-
Size
332KB
-
Sample
241101-qxtkfazjew
-
MD5
53b4aad111dd092c1ed41cdacdff51ed
-
SHA1
529d031eda234ec9ed2c0cf252154544c054176c
-
SHA256
896af404b97206a74df3d1213c8b1c5657f0fbbc207aeb4ac30864df5faf3afe
-
SHA512
c8436f4e032d23f0dc8dbc51a2c3e034fee3c40126dab94c0ee0791105ace7bd3ef3fea47b92d4452b860f251273c53412c13e0550b45ad3528838cad403751a
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYf:vHW138/iXWlK885rKlGSekcj66ciS
Static task
static1
Behavioral task
behavioral1
Sample
896af404b97206a74df3d1213c8b1c5657f0fbbc207aeb4ac30864df5faf3afe.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
896af404b97206a74df3d1213c8b1c5657f0fbbc207aeb4ac30864df5faf3afe
-
Size
332KB
-
MD5
53b4aad111dd092c1ed41cdacdff51ed
-
SHA1
529d031eda234ec9ed2c0cf252154544c054176c
-
SHA256
896af404b97206a74df3d1213c8b1c5657f0fbbc207aeb4ac30864df5faf3afe
-
SHA512
c8436f4e032d23f0dc8dbc51a2c3e034fee3c40126dab94c0ee0791105ace7bd3ef3fea47b92d4452b860f251273c53412c13e0550b45ad3528838cad403751a
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYf:vHW138/iXWlK885rKlGSekcj66ciS
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-