General
-
Target
7f26a966eb0432999e0de8f118dc2ba7ecd752dcb8da3eaa6b99d44158d6b17a.exe
-
Size
57KB
-
Sample
241112-jnh9sa1map
-
MD5
5c4205c4269a2d1815595faf5e679d2c
-
SHA1
9661541dc524a86dae464f6a2cf88df2c0793795
-
SHA256
7f26a966eb0432999e0de8f118dc2ba7ecd752dcb8da3eaa6b99d44158d6b17a
-
SHA512
f485370d75129eb8ced199c86826960570d62a75db0b6f731ba3cd6f05fff1b2e654fe4e56aec2c59e5a4754b7b271f2779e9623283db59e42ed87ed8b905a6c
-
SSDEEP
1536:amZ+4hcuX5uZ79jmvFQTXnz9yQ/PFBhl1L:amZ+luXwy2f9LDhDL
Static task
static1
Behavioral task
behavioral1
Sample
7f26a966eb0432999e0de8f118dc2ba7ecd752dcb8da3eaa6b99d44158d6b17a.exe
Resource
win7-20241023-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
7f26a966eb0432999e0de8f118dc2ba7ecd752dcb8da3eaa6b99d44158d6b17a.exe
-
Size
57KB
-
MD5
5c4205c4269a2d1815595faf5e679d2c
-
SHA1
9661541dc524a86dae464f6a2cf88df2c0793795
-
SHA256
7f26a966eb0432999e0de8f118dc2ba7ecd752dcb8da3eaa6b99d44158d6b17a
-
SHA512
f485370d75129eb8ced199c86826960570d62a75db0b6f731ba3cd6f05fff1b2e654fe4e56aec2c59e5a4754b7b271f2779e9623283db59e42ed87ed8b905a6c
-
SSDEEP
1536:amZ+4hcuX5uZ79jmvFQTXnz9yQ/PFBhl1L:amZ+luXwy2f9LDhDL
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-