General
-
Target
93b33f4c17b607dbe484cc81d53d005df8ba64680a4e9a42d43fe8fe7a8068adN
-
Size
326KB
-
Sample
241104-v89g9atkgw
-
MD5
2a974e548bcee92a9f49c8d04a12ab60
-
SHA1
20713d1c848b27e1f9edd9effe440b7910702d03
-
SHA256
93b33f4c17b607dbe484cc81d53d005df8ba64680a4e9a42d43fe8fe7a8068ad
-
SHA512
1140158ff78108353f15b2d3f1cca525b5b754aacf09cceb613b0e53ba663420e22b35a78819f680638df073f6556ec2a4ff9c2dfba1b8ff1911965bc09f6720
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYq:vHW138/iXWlK885rKlGSekcj66ciH
Static task
static1
Behavioral task
behavioral1
Sample
93b33f4c17b607dbe484cc81d53d005df8ba64680a4e9a42d43fe8fe7a8068adN.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
93b33f4c17b607dbe484cc81d53d005df8ba64680a4e9a42d43fe8fe7a8068adN
-
Size
326KB
-
MD5
2a974e548bcee92a9f49c8d04a12ab60
-
SHA1
20713d1c848b27e1f9edd9effe440b7910702d03
-
SHA256
93b33f4c17b607dbe484cc81d53d005df8ba64680a4e9a42d43fe8fe7a8068ad
-
SHA512
1140158ff78108353f15b2d3f1cca525b5b754aacf09cceb613b0e53ba663420e22b35a78819f680638df073f6556ec2a4ff9c2dfba1b8ff1911965bc09f6720
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYq:vHW138/iXWlK885rKlGSekcj66ciH
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-