General
-
Target
d64fda950b45151da02fc419e3f2329d52c74a6ce7cd84c921858f11b2fc7c82
-
Size
59KB
-
Sample
241110-dqbd3axqaw
-
MD5
a50c8e74327c1b87cbd740d5021912cf
-
SHA1
3d759ac94d4e8a8cf8f8a9d0681220bd222737fd
-
SHA256
d64fda950b45151da02fc419e3f2329d52c74a6ce7cd84c921858f11b2fc7c82
-
SHA512
1072f93837c2fed2b8846fb3e1eb8a2249fbb30a2f31f5049bc371fbc48ac8e342af91d103d3897d5cae112f2086f949afef6984215d6f936d3b33ded9cb19da
-
SSDEEP
768:jb4zb59Yix/RoyH+5flZirYqc97vFvrpaZG3DHvTdA9GgnOuS5Z3WXcKIZx5u3m:jbQx5oPsr2vFxDPhAvzgdWLIZ79
Static task
static1
Behavioral task
behavioral1
Sample
d64fda950b45151da02fc419e3f2329d52c74a6ce7cd84c921858f11b2fc7c82.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
d64fda950b45151da02fc419e3f2329d52c74a6ce7cd84c921858f11b2fc7c82
-
Size
59KB
-
MD5
a50c8e74327c1b87cbd740d5021912cf
-
SHA1
3d759ac94d4e8a8cf8f8a9d0681220bd222737fd
-
SHA256
d64fda950b45151da02fc419e3f2329d52c74a6ce7cd84c921858f11b2fc7c82
-
SHA512
1072f93837c2fed2b8846fb3e1eb8a2249fbb30a2f31f5049bc371fbc48ac8e342af91d103d3897d5cae112f2086f949afef6984215d6f936d3b33ded9cb19da
-
SSDEEP
768:jb4zb59Yix/RoyH+5flZirYqc97vFvrpaZG3DHvTdA9GgnOuS5Z3WXcKIZx5u3m:jbQx5oPsr2vFxDPhAvzgdWLIZ79
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-