General
-
Target
66fa0442e1c3091916a48ccb90a5cc141cc00add8a1235b6a71422dd114a988a.exe
-
Size
55KB
-
Sample
241112-bktmca1emb
-
MD5
5bb4304841ab726ef0a7ac1acc240ac5
-
SHA1
99b0cb5f3769e5c88b1f816c75e831669d8ca719
-
SHA256
66fa0442e1c3091916a48ccb90a5cc141cc00add8a1235b6a71422dd114a988a
-
SHA512
31e2dee40e1970b729a1ec673d9db0b4e4585478e4f6b533763a6c0cad8639a310294b34b2b7273793a08879ab807e32bd46be8e07d3827ef6c31f60b84a59aa
-
SSDEEP
1536:qw788avzI+on+TqOK0cHMqtzMLvWsrupwnTf1GqT7K:qwda7KVr0cHneunw1K
Static task
static1
Behavioral task
behavioral1
Sample
66fa0442e1c3091916a48ccb90a5cc141cc00add8a1235b6a71422dd114a988a.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
66fa0442e1c3091916a48ccb90a5cc141cc00add8a1235b6a71422dd114a988a.exe
-
Size
55KB
-
MD5
5bb4304841ab726ef0a7ac1acc240ac5
-
SHA1
99b0cb5f3769e5c88b1f816c75e831669d8ca719
-
SHA256
66fa0442e1c3091916a48ccb90a5cc141cc00add8a1235b6a71422dd114a988a
-
SHA512
31e2dee40e1970b729a1ec673d9db0b4e4585478e4f6b533763a6c0cad8639a310294b34b2b7273793a08879ab807e32bd46be8e07d3827ef6c31f60b84a59aa
-
SSDEEP
1536:qw788avzI+on+TqOK0cHMqtzMLvWsrupwnTf1GqT7K:qwda7KVr0cHneunw1K
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-