General
-
Target
ba1dabe671659607512ffbdc3a511ab291f71989e44fd9154ad406cd433ada6eN.exe
-
Size
55KB
-
Sample
241111-lgqfmawpft
-
MD5
34a0e54d7f14497ea80ed04f5046aabd
-
SHA1
8af6a963ea3e8ceb1c13118d7c6f70d5a5dbce35
-
SHA256
2552d789175213abe575a36707731c21cdfca34b5bd19b4f469ec7ce89069e90
-
SHA512
a09190143f1ee426f8324f225b265be4c3b48d0abed2079e7c35f77d288afbcbcca1fa3dbdb6a705c3305472e90f2372f6e96196aa94e2910545d0988c0645b2
-
SSDEEP
1536:qw788avzI+on+TqOK0cHMqtzMLvWsrupwnTf1GqT7l:qwda7KVr0cHneunw1l
Static task
static1
Behavioral task
behavioral1
Sample
ba1dabe671659607512ffbdc3a511ab291f71989e44fd9154ad406cd433ada6eN.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
ba1dabe671659607512ffbdc3a511ab291f71989e44fd9154ad406cd433ada6eN.exe
-
Size
55KB
-
MD5
34a0e54d7f14497ea80ed04f5046aabd
-
SHA1
8af6a963ea3e8ceb1c13118d7c6f70d5a5dbce35
-
SHA256
2552d789175213abe575a36707731c21cdfca34b5bd19b4f469ec7ce89069e90
-
SHA512
a09190143f1ee426f8324f225b265be4c3b48d0abed2079e7c35f77d288afbcbcca1fa3dbdb6a705c3305472e90f2372f6e96196aa94e2910545d0988c0645b2
-
SSDEEP
1536:qw788avzI+on+TqOK0cHMqtzMLvWsrupwnTf1GqT7l:qwda7KVr0cHneunw1l
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-