General
-
Target
ce6c31313b8164944cd16a1c9e0cd473f571861dcef444c69885f61138a2f996N
-
Size
501KB
-
Sample
241104-trqs5sskdt
-
MD5
0310c3acb1be722cb0b048edf61a5ce0
-
SHA1
8babab2d4ebd61b02dd6d5f924bfd8ffc0ea53e8
-
SHA256
ce6c31313b8164944cd16a1c9e0cd473f571861dcef444c69885f61138a2f996
-
SHA512
992c8a167f92703d713801f16fa663d4c09b7738daa2772c9022b313a2a59cdc78a6c280d1025fc939cd21bc94d7b1c6a442a62ca03d87511cbb49045cfe25da
-
SSDEEP
12288:Po7CGWcQSyYI2VrFKH5RBv9AQ1pEDdK5x:PMUv2LAv9AQ1p4dKP
Behavioral task
behavioral1
Sample
ce6c31313b8164944cd16a1c9e0cd473f571861dcef444c69885f61138a2f996N.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
ce6c31313b8164944cd16a1c9e0cd473f571861dcef444c69885f61138a2f996N
-
Size
501KB
-
MD5
0310c3acb1be722cb0b048edf61a5ce0
-
SHA1
8babab2d4ebd61b02dd6d5f924bfd8ffc0ea53e8
-
SHA256
ce6c31313b8164944cd16a1c9e0cd473f571861dcef444c69885f61138a2f996
-
SHA512
992c8a167f92703d713801f16fa663d4c09b7738daa2772c9022b313a2a59cdc78a6c280d1025fc939cd21bc94d7b1c6a442a62ca03d87511cbb49045cfe25da
-
SSDEEP
12288:Po7CGWcQSyYI2VrFKH5RBv9AQ1pEDdK5x:PMUv2LAv9AQ1p4dKP
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-