General
-
Target
652b84b4eb5106f43433b5a98ced1d0f3d8dad22d8ea3b75c7bf4a21967ce1caN
-
Size
55KB
-
Sample
241110-qn4n2sxjbz
-
MD5
0f41cf6554c89c7486ddce00aaaff410
-
SHA1
473f131630e86be55efb00eeb64f90a91e6e1578
-
SHA256
652b84b4eb5106f43433b5a98ced1d0f3d8dad22d8ea3b75c7bf4a21967ce1ca
-
SHA512
c64eedbce5320fe0cc0517ff054ed22195522b636a2f4c586edab49cbb80e37066570fabd9e5bf8c00308b40e16c9fe45dbff14c0e7231e0310ec2e911f4626f
-
SSDEEP
1536:qw788avzI+on+TqOK0cHMqtzMLvWsrupwnTf1GqT7o:qwda7KVr0cHneunw1o
Static task
static1
Behavioral task
behavioral1
Sample
652b84b4eb5106f43433b5a98ced1d0f3d8dad22d8ea3b75c7bf4a21967ce1caN.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
652b84b4eb5106f43433b5a98ced1d0f3d8dad22d8ea3b75c7bf4a21967ce1caN
-
Size
55KB
-
MD5
0f41cf6554c89c7486ddce00aaaff410
-
SHA1
473f131630e86be55efb00eeb64f90a91e6e1578
-
SHA256
652b84b4eb5106f43433b5a98ced1d0f3d8dad22d8ea3b75c7bf4a21967ce1ca
-
SHA512
c64eedbce5320fe0cc0517ff054ed22195522b636a2f4c586edab49cbb80e37066570fabd9e5bf8c00308b40e16c9fe45dbff14c0e7231e0310ec2e911f4626f
-
SSDEEP
1536:qw788avzI+on+TqOK0cHMqtzMLvWsrupwnTf1GqT7o:qwda7KVr0cHneunw1o
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-