General
-
Target
68249b9f12d6ceb8d01642792aa0c339be98db13f347221a3eccd34b06ff276bN
-
Size
330KB
-
Sample
241109-vn1dvaxnbt
-
MD5
435eee9efda9b0d01f48fbd3a90f2e40
-
SHA1
106d2b28251042020e84140671e3755396ce1214
-
SHA256
68249b9f12d6ceb8d01642792aa0c339be98db13f347221a3eccd34b06ff276b
-
SHA512
4999741809c920713a8d426a989f39bb9aeb6df38b1ffc2df4afdd5fefe6ae3ff5c4310f112696a950e51dd12a0d34778b1596a74b7e9c4d1175eace592bc020
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYu:vHW138/iXWlK885rKlGSekcj66cir
Static task
static1
Behavioral task
behavioral1
Sample
68249b9f12d6ceb8d01642792aa0c339be98db13f347221a3eccd34b06ff276bN.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
68249b9f12d6ceb8d01642792aa0c339be98db13f347221a3eccd34b06ff276bN
-
Size
330KB
-
MD5
435eee9efda9b0d01f48fbd3a90f2e40
-
SHA1
106d2b28251042020e84140671e3755396ce1214
-
SHA256
68249b9f12d6ceb8d01642792aa0c339be98db13f347221a3eccd34b06ff276b
-
SHA512
4999741809c920713a8d426a989f39bb9aeb6df38b1ffc2df4afdd5fefe6ae3ff5c4310f112696a950e51dd12a0d34778b1596a74b7e9c4d1175eace592bc020
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYu:vHW138/iXWlK885rKlGSekcj66cir
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-