General
-
Target
d172e96253442c43692bb502dcffa2aa08d8b7f17180d9b1242222098bda621eN
-
Size
57KB
-
Sample
241104-y17kgawkas
-
MD5
b24a504f5c5f7eac5cc678c2895e0420
-
SHA1
6ae0e33e036e8faf662b2e47efdb9de72a9d8e0d
-
SHA256
d172e96253442c43692bb502dcffa2aa08d8b7f17180d9b1242222098bda621e
-
SHA512
4ed71d259c967cf8b16d53260ce60a48187926acd226616661b85c11ecbe025728032193606b0da8635177f5a9439a4ada9ae27bb9672e6dfcd5feaf806fafd3
-
SSDEEP
1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8T:MOemdTd1o74qlmbbJ+x+Ikx
Static task
static1
Behavioral task
behavioral1
Sample
d172e96253442c43692bb502dcffa2aa08d8b7f17180d9b1242222098bda621eN.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
d172e96253442c43692bb502dcffa2aa08d8b7f17180d9b1242222098bda621eN
-
Size
57KB
-
MD5
b24a504f5c5f7eac5cc678c2895e0420
-
SHA1
6ae0e33e036e8faf662b2e47efdb9de72a9d8e0d
-
SHA256
d172e96253442c43692bb502dcffa2aa08d8b7f17180d9b1242222098bda621e
-
SHA512
4ed71d259c967cf8b16d53260ce60a48187926acd226616661b85c11ecbe025728032193606b0da8635177f5a9439a4ada9ae27bb9672e6dfcd5feaf806fafd3
-
SSDEEP
1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8T:MOemdTd1o74qlmbbJ+x+Ikx
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-