General
-
Target
9cbbc3506ef59fe1ee5234870796925598864441e42c64e64f2d73a2b79c6dd4N.exe
-
Size
454KB
-
Sample
241112-wc68paxhjb
-
MD5
c78e49bc32b6fcfa5772254f2a503170
-
SHA1
d77a6a35c674d9497ef937b3aab56611f54d63eb
-
SHA256
9cbbc3506ef59fe1ee5234870796925598864441e42c64e64f2d73a2b79c6dd4
-
SHA512
7d2cdba0e0c7ab379c304fe1b3a088dd400d07982a1538281deb7cc7a8c25b76b257d45bdd7a53a7425a05cb0d653cdd31fc363d20cdbe8e358d0abfd3467f08
-
SSDEEP
6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFTnm:CMpASIcWYx2U6hAJQnZ
Behavioral task
behavioral1
Sample
9cbbc3506ef59fe1ee5234870796925598864441e42c64e64f2d73a2b79c6dd4N.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
9cbbc3506ef59fe1ee5234870796925598864441e42c64e64f2d73a2b79c6dd4N.exe
-
Size
454KB
-
MD5
c78e49bc32b6fcfa5772254f2a503170
-
SHA1
d77a6a35c674d9497ef937b3aab56611f54d63eb
-
SHA256
9cbbc3506ef59fe1ee5234870796925598864441e42c64e64f2d73a2b79c6dd4
-
SHA512
7d2cdba0e0c7ab379c304fe1b3a088dd400d07982a1538281deb7cc7a8c25b76b257d45bdd7a53a7425a05cb0d653cdd31fc363d20cdbe8e358d0abfd3467f08
-
SSDEEP
6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFTnm:CMpASIcWYx2U6hAJQnZ
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-