General
-
Target
96b8750dccde728e22e094fd5469c35a5ce4cab64e85a902858de86e3a443572N
-
Size
330KB
-
Sample
241105-14gjkaslhq
-
MD5
3a68bb128a59328497ab1547eb478530
-
SHA1
8f7a15df1faeb57364891133ea4f8c2f60cc70ac
-
SHA256
96b8750dccde728e22e094fd5469c35a5ce4cab64e85a902858de86e3a443572
-
SHA512
e541c19ea0d9ed197fdda2b5e6dd08bc3ac8464cce5bcfd09a20aecbada77d4ce77235c954fefcb7388ffc03d99e6ae458b33181991f321d24e9eee17379c083
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYw:vHW138/iXWlK885rKlGSekcj66ci5
Static task
static1
Behavioral task
behavioral1
Sample
96b8750dccde728e22e094fd5469c35a5ce4cab64e85a902858de86e3a443572N.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
96b8750dccde728e22e094fd5469c35a5ce4cab64e85a902858de86e3a443572N
-
Size
330KB
-
MD5
3a68bb128a59328497ab1547eb478530
-
SHA1
8f7a15df1faeb57364891133ea4f8c2f60cc70ac
-
SHA256
96b8750dccde728e22e094fd5469c35a5ce4cab64e85a902858de86e3a443572
-
SHA512
e541c19ea0d9ed197fdda2b5e6dd08bc3ac8464cce5bcfd09a20aecbada77d4ce77235c954fefcb7388ffc03d99e6ae458b33181991f321d24e9eee17379c083
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYw:vHW138/iXWlK885rKlGSekcj66ci5
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-