General
-
Target
76d21484127516df1585bfc2862602b638873211074606913e4e3cc5b8a1371a
-
Size
80KB
-
Sample
241112-3ndtvatbma
-
MD5
478ed604f87c3820b72fbaf5803f6a47
-
SHA1
e89945f9ab8a41aaf93a74b348dc0a3d95e49d83
-
SHA256
76d21484127516df1585bfc2862602b638873211074606913e4e3cc5b8a1371a
-
SHA512
f90d4745a236af07d0702fa7634286cb89564980092c806c7b0a4367b2c9d727c41c6301a719df582510ce87e874c4ac38f363b53a1f3b287b169d84a259526e
-
SSDEEP
1536:zxKyhnAUfUiZR9G84qk+Be/HZ17hmZpDsxu1p:zLCEZTGx518ox6p
Static task
static1
Behavioral task
behavioral1
Sample
76d21484127516df1585bfc2862602b638873211074606913e4e3cc5b8a1371a.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.28.139
121.88.5.183
Targets
-
-
Target
76d21484127516df1585bfc2862602b638873211074606913e4e3cc5b8a1371a
-
Size
80KB
-
MD5
478ed604f87c3820b72fbaf5803f6a47
-
SHA1
e89945f9ab8a41aaf93a74b348dc0a3d95e49d83
-
SHA256
76d21484127516df1585bfc2862602b638873211074606913e4e3cc5b8a1371a
-
SHA512
f90d4745a236af07d0702fa7634286cb89564980092c806c7b0a4367b2c9d727c41c6301a719df582510ce87e874c4ac38f363b53a1f3b287b169d84a259526e
-
SSDEEP
1536:zxKyhnAUfUiZR9G84qk+Be/HZ17hmZpDsxu1p:zLCEZTGx518ox6p
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-