General
-
Target
d6d4fb47e8467d22c05f9d883047338283d478f67c3d06c1cd913912f29daaf7N
-
Size
508KB
-
Sample
241106-p36lhszkcx
-
MD5
31574086dc57810c0f2cf1941e4f4120
-
SHA1
62f65220f27a18d399a930ccd5072201b300c34f
-
SHA256
d6d4fb47e8467d22c05f9d883047338283d478f67c3d06c1cd913912f29daaf7
-
SHA512
c37fd668056ab223d8da048beffa9e2f36146916de53e7bf8db72989f2cb10603aacdc94644e79d1647c1ee9d2f986158a75a90fd7add2c04eaa077a5d7d877a
-
SSDEEP
12288:Po7CGWcQSyYI2VrFKH5RBv9AQ1pEDdK5W/:PMUv2LAv9AQ1p4dKA/
Behavioral task
behavioral1
Sample
d6d4fb47e8467d22c05f9d883047338283d478f67c3d06c1cd913912f29daaf7N.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
d6d4fb47e8467d22c05f9d883047338283d478f67c3d06c1cd913912f29daaf7N
-
Size
508KB
-
MD5
31574086dc57810c0f2cf1941e4f4120
-
SHA1
62f65220f27a18d399a930ccd5072201b300c34f
-
SHA256
d6d4fb47e8467d22c05f9d883047338283d478f67c3d06c1cd913912f29daaf7
-
SHA512
c37fd668056ab223d8da048beffa9e2f36146916de53e7bf8db72989f2cb10603aacdc94644e79d1647c1ee9d2f986158a75a90fd7add2c04eaa077a5d7d877a
-
SSDEEP
12288:Po7CGWcQSyYI2VrFKH5RBv9AQ1pEDdK5W/:PMUv2LAv9AQ1p4dKA/
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-