General
-
Target
31f07747ce71885358dd49f3416aca8290a6684ba699a8ad97448819ce3c467d
-
Size
62KB
-
Sample
241111-zttkpszkcj
-
MD5
7418f5d7e50d9b410c0ac7baec9a894b
-
SHA1
bdca1455fbca27f4dd183d761ff63c3023f55c67
-
SHA256
31f07747ce71885358dd49f3416aca8290a6684ba699a8ad97448819ce3c467d
-
SHA512
bc370d63876c37c1295542d49bb697977a30137dde340e4b748d75f72a3c2d921e9d7ac89311fffb0e203b214f4739e524d638bbe9f65bc4bd1d299c2749bbd4
-
SSDEEP
1536:saTkcl2v/z0thjkh6+uYLo31d0JuPrROVT:Jo0cAthu6+FQ0JuPkT
Static task
static1
Behavioral task
behavioral1
Sample
31f07747ce71885358dd49f3416aca8290a6684ba699a8ad97448819ce3c467d.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
31f07747ce71885358dd49f3416aca8290a6684ba699a8ad97448819ce3c467d
-
Size
62KB
-
MD5
7418f5d7e50d9b410c0ac7baec9a894b
-
SHA1
bdca1455fbca27f4dd183d761ff63c3023f55c67
-
SHA256
31f07747ce71885358dd49f3416aca8290a6684ba699a8ad97448819ce3c467d
-
SHA512
bc370d63876c37c1295542d49bb697977a30137dde340e4b748d75f72a3c2d921e9d7ac89311fffb0e203b214f4739e524d638bbe9f65bc4bd1d299c2749bbd4
-
SSDEEP
1536:saTkcl2v/z0thjkh6+uYLo31d0JuPrROVT:Jo0cAthu6+FQ0JuPkT
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-