General
-
Target
c7f34fcf3ce0cd88cef94ad44beb049b47cd46ae487f882c3a42841949297e44
-
Size
328KB
-
Sample
241107-ewdxtavjgt
-
MD5
7278c271c2eef03467db27313917b658
-
SHA1
9629d2d11c22a6da39b2640759db5466900fdece
-
SHA256
c7f34fcf3ce0cd88cef94ad44beb049b47cd46ae487f882c3a42841949297e44
-
SHA512
0a71c83047f23e4e451e9df2ce188bd6ea9f41e446b1add9e48118584c76d54cde3ad6252d38fcc4071e15e2bc6f2e0f5f1165112febe15b7d6022c1d2babf39
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYMO0B:vHW138/iXWlK885rKlGSekcj66ciRB
Static task
static1
Behavioral task
behavioral1
Sample
c7f34fcf3ce0cd88cef94ad44beb049b47cd46ae487f882c3a42841949297e44.exe
Resource
win7-20240708-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
c7f34fcf3ce0cd88cef94ad44beb049b47cd46ae487f882c3a42841949297e44
-
Size
328KB
-
MD5
7278c271c2eef03467db27313917b658
-
SHA1
9629d2d11c22a6da39b2640759db5466900fdece
-
SHA256
c7f34fcf3ce0cd88cef94ad44beb049b47cd46ae487f882c3a42841949297e44
-
SHA512
0a71c83047f23e4e451e9df2ce188bd6ea9f41e446b1add9e48118584c76d54cde3ad6252d38fcc4071e15e2bc6f2e0f5f1165112febe15b7d6022c1d2babf39
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYMO0B:vHW138/iXWlK885rKlGSekcj66ciRB
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-