General
-
Target
5c1f6a9e3818afcc9a09e6a512738e281be7fdcfb86b0a109ec9f5f9d6db1f62
-
Size
73KB
-
Sample
241104-2zvfaszdjr
-
MD5
62526530c6cc0e4dc85cbdde05b49779
-
SHA1
fcd30fd4136ef357bde96c57dcf67b2b25a32939
-
SHA256
5c1f6a9e3818afcc9a09e6a512738e281be7fdcfb86b0a109ec9f5f9d6db1f62
-
SHA512
f51502bc848445acf0ca86a709ace129648fa8a0521fd03cd50a8dbdf2b18a96987f816daa77fc36b5690ded8c44114f00aca45186120bdece3b86b0caee33aa
-
SSDEEP
1536:+Uk8RgDXz7Kx8zzgmTlvtKrNCpbXmsz4tHk:Tk8yn7KdmTINQXzz4m
Static task
static1
Behavioral task
behavioral1
Sample
5c1f6a9e3818afcc9a09e6a512738e281be7fdcfb86b0a109ec9f5f9d6db1f62.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
112.175.88.207
112.175.88.208
Targets
-
-
Target
5c1f6a9e3818afcc9a09e6a512738e281be7fdcfb86b0a109ec9f5f9d6db1f62
-
Size
73KB
-
MD5
62526530c6cc0e4dc85cbdde05b49779
-
SHA1
fcd30fd4136ef357bde96c57dcf67b2b25a32939
-
SHA256
5c1f6a9e3818afcc9a09e6a512738e281be7fdcfb86b0a109ec9f5f9d6db1f62
-
SHA512
f51502bc848445acf0ca86a709ace129648fa8a0521fd03cd50a8dbdf2b18a96987f816daa77fc36b5690ded8c44114f00aca45186120bdece3b86b0caee33aa
-
SSDEEP
1536:+Uk8RgDXz7Kx8zzgmTlvtKrNCpbXmsz4tHk:Tk8yn7KdmTINQXzz4m
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-