General
-
Target
abcb810a0a10b864d14fc65aaea605d03b64cdad8b49caa8e13602c463f15c4fN
-
Size
499KB
-
Sample
241105-ywbx1axjgy
-
MD5
c1498744807f0a299dbb91bb33023760
-
SHA1
6ac36ff619b2c01bf689d54047fff4e47acdbd2d
-
SHA256
abcb810a0a10b864d14fc65aaea605d03b64cdad8b49caa8e13602c463f15c4f
-
SHA512
b81e5cef86d970056659021727990f85fa976fd64215174a8b4fc0348162d8ed727ba52d0a8981aadbaf3958b6ff518639c46b1a031f418cdeedba5da01dc043
-
SSDEEP
12288:Po7CGWcQSyYI2VrFKH5RBv9AQ1pEDdK5U:PMUv2LAv9AQ1p4dKW
Behavioral task
behavioral1
Sample
abcb810a0a10b864d14fc65aaea605d03b64cdad8b49caa8e13602c463f15c4fN.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
abcb810a0a10b864d14fc65aaea605d03b64cdad8b49caa8e13602c463f15c4fN
-
Size
499KB
-
MD5
c1498744807f0a299dbb91bb33023760
-
SHA1
6ac36ff619b2c01bf689d54047fff4e47acdbd2d
-
SHA256
abcb810a0a10b864d14fc65aaea605d03b64cdad8b49caa8e13602c463f15c4f
-
SHA512
b81e5cef86d970056659021727990f85fa976fd64215174a8b4fc0348162d8ed727ba52d0a8981aadbaf3958b6ff518639c46b1a031f418cdeedba5da01dc043
-
SSDEEP
12288:Po7CGWcQSyYI2VrFKH5RBv9AQ1pEDdK5U:PMUv2LAv9AQ1p4dKW
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-