General
-
Target
98392e6067c52c9527ab54d68a826e6a23d227e1feb2cd903d6d6196fb1278e0N
-
Size
64KB
-
Sample
241110-bkw3gawere
-
MD5
06be482fb128c36dda1b20ffb3dcce10
-
SHA1
c2e9ede70cbbb927ad9f87ca34678aaeb622422c
-
SHA256
98392e6067c52c9527ab54d68a826e6a23d227e1feb2cd903d6d6196fb1278e0
-
SHA512
5f9f9b239bccb09c3c2c2e61d252f02f003f606b80c5e6e1b2f40432ad353d2a4d5fae9da5489d6deb8edaf9295399b2d56718114db19c9370a1ee2731ce3c90
-
SSDEEP
1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTm/F:6bQRSHpAvzyf7MzeTYF
Static task
static1
Behavioral task
behavioral1
Sample
98392e6067c52c9527ab54d68a826e6a23d227e1feb2cd903d6d6196fb1278e0N.exe
Resource
win7-20240708-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
98392e6067c52c9527ab54d68a826e6a23d227e1feb2cd903d6d6196fb1278e0N
-
Size
64KB
-
MD5
06be482fb128c36dda1b20ffb3dcce10
-
SHA1
c2e9ede70cbbb927ad9f87ca34678aaeb622422c
-
SHA256
98392e6067c52c9527ab54d68a826e6a23d227e1feb2cd903d6d6196fb1278e0
-
SHA512
5f9f9b239bccb09c3c2c2e61d252f02f003f606b80c5e6e1b2f40432ad353d2a4d5fae9da5489d6deb8edaf9295399b2d56718114db19c9370a1ee2731ce3c90
-
SSDEEP
1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTm/F:6bQRSHpAvzyf7MzeTYF
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-