General
-
Target
3e36d5da828a02f90dae7de8369005c3007408404b818a3d4464acba2f46fc2cN
-
Size
505KB
-
Sample
241110-nyjerawfre
-
MD5
b04f960d5f9867d22751ec57e00a51a0
-
SHA1
77d6e5b9ac6cb3c3f290d0b7e8e4de1f8e5bdfaf
-
SHA256
3e36d5da828a02f90dae7de8369005c3007408404b818a3d4464acba2f46fc2c
-
SHA512
c2e72f2af0d450591e4ee4a1050bf1abeaa39c9980b6394f855e1fd437efa525ec17744ac01560fc48424ef3612b05d5c7f6c7128a09bed89d6c2c3a1cde63a8
-
SSDEEP
12288:Po7CGWcQSyYI2VrFKH5RBv9AQ1pEDdK5p:PMUv2LAv9AQ1p4dKT
Behavioral task
behavioral1
Sample
3e36d5da828a02f90dae7de8369005c3007408404b818a3d4464acba2f46fc2cN.exe
Resource
win7-20240729-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
3e36d5da828a02f90dae7de8369005c3007408404b818a3d4464acba2f46fc2cN
-
Size
505KB
-
MD5
b04f960d5f9867d22751ec57e00a51a0
-
SHA1
77d6e5b9ac6cb3c3f290d0b7e8e4de1f8e5bdfaf
-
SHA256
3e36d5da828a02f90dae7de8369005c3007408404b818a3d4464acba2f46fc2c
-
SHA512
c2e72f2af0d450591e4ee4a1050bf1abeaa39c9980b6394f855e1fd437efa525ec17744ac01560fc48424ef3612b05d5c7f6c7128a09bed89d6c2c3a1cde63a8
-
SSDEEP
12288:Po7CGWcQSyYI2VrFKH5RBv9AQ1pEDdK5p:PMUv2LAv9AQ1p4dKT
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-