General
-
Target
4b0346b3390c68f214af1c1b12f9469b871194e2c6d930aa6f1bf7191a13fd06N
-
Size
332KB
-
Sample
241107-sjxq2sxjgr
-
MD5
0245c187c3e8aadc222e614423e615d0
-
SHA1
3a50a9991861ef8dc121fbec4f0bb8667144dd2c
-
SHA256
4b0346b3390c68f214af1c1b12f9469b871194e2c6d930aa6f1bf7191a13fd06
-
SHA512
60d37fa1e4cf1e6c63e854d328f0d4cf30a01edb9a622c1944320d17080fc05e4ad5c176589038fd8e02ad44fb8df3a060dc4e750c6ab9c9fe87fa5e5ddd110b
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVJ:vHW138/iXWlK885rKlGSekcj66ciEJ
Static task
static1
Behavioral task
behavioral1
Sample
4b0346b3390c68f214af1c1b12f9469b871194e2c6d930aa6f1bf7191a13fd06N.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
4b0346b3390c68f214af1c1b12f9469b871194e2c6d930aa6f1bf7191a13fd06N
-
Size
332KB
-
MD5
0245c187c3e8aadc222e614423e615d0
-
SHA1
3a50a9991861ef8dc121fbec4f0bb8667144dd2c
-
SHA256
4b0346b3390c68f214af1c1b12f9469b871194e2c6d930aa6f1bf7191a13fd06
-
SHA512
60d37fa1e4cf1e6c63e854d328f0d4cf30a01edb9a622c1944320d17080fc05e4ad5c176589038fd8e02ad44fb8df3a060dc4e750c6ab9c9fe87fa5e5ddd110b
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVJ:vHW138/iXWlK885rKlGSekcj66ciEJ
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-