General
-
Target
c64a982e271d889db4868885ba61582e3f1e49c68580f00716e4db6075883e33N
-
Size
508KB
-
Sample
241109-cgyybsvdqe
-
MD5
8c988034c138f1a4ab47d329561858b0
-
SHA1
89606697c62c89531e16f2944446ba8e7454d0f6
-
SHA256
c64a982e271d889db4868885ba61582e3f1e49c68580f00716e4db6075883e33
-
SHA512
786582f45080c482cc105a7a9e70473b58d9a1e28c8712c94175fbdfe7a9114c873a6ab51ea9738b282e6b516980b83ec2e7d328c1f72f6adfec45cdfc9a89a4
-
SSDEEP
12288:Po7CGWcQSyYI2VrFKH5RBv9AQ1pEDdK5Wl:PMUv2LAv9AQ1p4dKAl
Behavioral task
behavioral1
Sample
c64a982e271d889db4868885ba61582e3f1e49c68580f00716e4db6075883e33N.exe
Resource
win7-20240708-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
c64a982e271d889db4868885ba61582e3f1e49c68580f00716e4db6075883e33N
-
Size
508KB
-
MD5
8c988034c138f1a4ab47d329561858b0
-
SHA1
89606697c62c89531e16f2944446ba8e7454d0f6
-
SHA256
c64a982e271d889db4868885ba61582e3f1e49c68580f00716e4db6075883e33
-
SHA512
786582f45080c482cc105a7a9e70473b58d9a1e28c8712c94175fbdfe7a9114c873a6ab51ea9738b282e6b516980b83ec2e7d328c1f72f6adfec45cdfc9a89a4
-
SSDEEP
12288:Po7CGWcQSyYI2VrFKH5RBv9AQ1pEDdK5Wl:PMUv2LAv9AQ1p4dKAl
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-