General
-
Target
c894b6d294b57a79f7f2a1724559625acb76ad59487d4944991c15e8cc364ee1N
-
Size
333KB
-
Sample
241102-1fd4jawjez
-
MD5
b73a1d20ba44fc157c979919730d53b0
-
SHA1
68decb89026da30677cb4a15bfc06fd6731fcc43
-
SHA256
c894b6d294b57a79f7f2a1724559625acb76ad59487d4944991c15e8cc364ee1
-
SHA512
885e5a1a60ea24c48a0532833c7c0254665d119c53dfc6ede7c929cbf408450235ba9bc295e0eb8e26ec0587c414795c061288bab0d51a5aa4237925e9e09c08
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY9D:vHW138/iXWlK885rKlGSekcj66ciWD
Static task
static1
Behavioral task
behavioral1
Sample
c894b6d294b57a79f7f2a1724559625acb76ad59487d4944991c15e8cc364ee1N.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
c894b6d294b57a79f7f2a1724559625acb76ad59487d4944991c15e8cc364ee1N
-
Size
333KB
-
MD5
b73a1d20ba44fc157c979919730d53b0
-
SHA1
68decb89026da30677cb4a15bfc06fd6731fcc43
-
SHA256
c894b6d294b57a79f7f2a1724559625acb76ad59487d4944991c15e8cc364ee1
-
SHA512
885e5a1a60ea24c48a0532833c7c0254665d119c53dfc6ede7c929cbf408450235ba9bc295e0eb8e26ec0587c414795c061288bab0d51a5aa4237925e9e09c08
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY9D:vHW138/iXWlK885rKlGSekcj66ciWD
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-