General
-
Target
b6549b58caf61979eb3187333171d03407c501904f99b160191e86313fd2909aN
-
Size
80KB
-
Sample
241107-a1my3asbkp
-
MD5
7685cea159852e354e437f9a4c5a1ae0
-
SHA1
d46d7da1332fb0fd42781fbf60ed6a31ddd752de
-
SHA256
b6549b58caf61979eb3187333171d03407c501904f99b160191e86313fd2909a
-
SHA512
a40e37ed765f447ac02ae6347de8c14963d058654f1c870a76729438ce3af6220483bc2a79c265c5fb4f32863cc5117210fb3ed2a59b02968c0189298549e19b
-
SSDEEP
1536:zxKyhnAUfUiZR9G84qk+Be/HZ17hmZpDsxu1A:zLCEZTGx518ox6A
Static task
static1
Behavioral task
behavioral1
Sample
b6549b58caf61979eb3187333171d03407c501904f99b160191e86313fd2909aN.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.28.139
121.88.5.183
Targets
-
-
Target
b6549b58caf61979eb3187333171d03407c501904f99b160191e86313fd2909aN
-
Size
80KB
-
MD5
7685cea159852e354e437f9a4c5a1ae0
-
SHA1
d46d7da1332fb0fd42781fbf60ed6a31ddd752de
-
SHA256
b6549b58caf61979eb3187333171d03407c501904f99b160191e86313fd2909a
-
SHA512
a40e37ed765f447ac02ae6347de8c14963d058654f1c870a76729438ce3af6220483bc2a79c265c5fb4f32863cc5117210fb3ed2a59b02968c0189298549e19b
-
SSDEEP
1536:zxKyhnAUfUiZR9G84qk+Be/HZ17hmZpDsxu1A:zLCEZTGx518ox6A
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-