General
-
Target
a88e3438090cdb7a5df06f6d49223a0d34f048bda9d3f232ba0f6389574ff23d
-
Size
62KB
-
Sample
241111-cg6yyayrhw
-
MD5
28f5c0ad594aea9bd980ffcb779c3da2
-
SHA1
41d75d0561899bd96818216ba1ac72ea1d45a027
-
SHA256
a88e3438090cdb7a5df06f6d49223a0d34f048bda9d3f232ba0f6389574ff23d
-
SHA512
289b24963866654e165a00dc30ac505add85ded13188ec7d71f8120660c89eb1a73b3e928c4d4cdd48f5e3565ed65d3d92ad7e61e2a929e4f06ab1deb9a14780
-
SSDEEP
1536:saTkcl2v/z0thjkh6+uYLo31d0JuPrROV8:Jo0cAthu6+FQ0JuPk8
Static task
static1
Behavioral task
behavioral1
Sample
a88e3438090cdb7a5df06f6d49223a0d34f048bda9d3f232ba0f6389574ff23d.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
a88e3438090cdb7a5df06f6d49223a0d34f048bda9d3f232ba0f6389574ff23d
-
Size
62KB
-
MD5
28f5c0ad594aea9bd980ffcb779c3da2
-
SHA1
41d75d0561899bd96818216ba1ac72ea1d45a027
-
SHA256
a88e3438090cdb7a5df06f6d49223a0d34f048bda9d3f232ba0f6389574ff23d
-
SHA512
289b24963866654e165a00dc30ac505add85ded13188ec7d71f8120660c89eb1a73b3e928c4d4cdd48f5e3565ed65d3d92ad7e61e2a929e4f06ab1deb9a14780
-
SSDEEP
1536:saTkcl2v/z0thjkh6+uYLo31d0JuPrROV8:Jo0cAthu6+FQ0JuPk8
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-