General
-
Target
83e21c657b4b81773ba3783cd925aa3451acd334956b9e0a30dcf9186c218080
-
Size
557KB
-
Sample
241112-anr29azgne
-
MD5
2050e0d2beef8b99c228a4635fecf906
-
SHA1
a91d4724974124937538e6467b6f03b6c4415d01
-
SHA256
83e21c657b4b81773ba3783cd925aa3451acd334956b9e0a30dcf9186c218080
-
SHA512
9876599d9682ed38fd10f4ceca2df1655d8dd947b5122d6705745df547d85cb4a8ebd0403b5e24482ee302f879b0b3b5bf36d339fe805640af23ea69035e9cfd
-
SSDEEP
12288:zccNvdRExZGe+Q1nSoS++43x+l7QLiaEyH:znPfQp9L3olqFH
Behavioral task
behavioral1
Sample
83e21c657b4b81773ba3783cd925aa3451acd334956b9e0a30dcf9186c218080.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.226
218.54.31.165
Targets
-
-
Target
83e21c657b4b81773ba3783cd925aa3451acd334956b9e0a30dcf9186c218080
-
Size
557KB
-
MD5
2050e0d2beef8b99c228a4635fecf906
-
SHA1
a91d4724974124937538e6467b6f03b6c4415d01
-
SHA256
83e21c657b4b81773ba3783cd925aa3451acd334956b9e0a30dcf9186c218080
-
SHA512
9876599d9682ed38fd10f4ceca2df1655d8dd947b5122d6705745df547d85cb4a8ebd0403b5e24482ee302f879b0b3b5bf36d339fe805640af23ea69035e9cfd
-
SSDEEP
12288:zccNvdRExZGe+Q1nSoS++43x+l7QLiaEyH:znPfQp9L3olqFH
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-