General
-
Target
205fbf24188cda93834f5cdaa936fc357c0fab0af52d2c7c3031793676104b72N
-
Size
501KB
-
Sample
241110-thfxkszkaz
-
MD5
2f00bc053e91876927b266ea4cfcd9d0
-
SHA1
307ba7289d2b57b5d587532e8ee804191a5d4ad5
-
SHA256
205fbf24188cda93834f5cdaa936fc357c0fab0af52d2c7c3031793676104b72
-
SHA512
e282037a95ce72e670b687b8dc80472b26603c372250c578b0fd2ca9b1c47b81a6162d6b4344654c8ff924687f95e76f52e236dd30c04cb754f1e0447694aa5f
-
SSDEEP
12288:Po7CGWcQSyYI2VrFKH5RBv9AQ1pEDdK5B:PMUv2LAv9AQ1p4dKf
Behavioral task
behavioral1
Sample
205fbf24188cda93834f5cdaa936fc357c0fab0af52d2c7c3031793676104b72N.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
205fbf24188cda93834f5cdaa936fc357c0fab0af52d2c7c3031793676104b72N
-
Size
501KB
-
MD5
2f00bc053e91876927b266ea4cfcd9d0
-
SHA1
307ba7289d2b57b5d587532e8ee804191a5d4ad5
-
SHA256
205fbf24188cda93834f5cdaa936fc357c0fab0af52d2c7c3031793676104b72
-
SHA512
e282037a95ce72e670b687b8dc80472b26603c372250c578b0fd2ca9b1c47b81a6162d6b4344654c8ff924687f95e76f52e236dd30c04cb754f1e0447694aa5f
-
SSDEEP
12288:Po7CGWcQSyYI2VrFKH5RBv9AQ1pEDdK5B:PMUv2LAv9AQ1p4dKf
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-