General
-
Target
afc4bb4b46c0f16e0b7ed4cc621bcb57c3b7b25deb3d5aab5a8b9f8b10ba9f8b
-
Size
73KB
-
Sample
241113-b175nstldt
-
MD5
e42775cac1beb83c84030665aa63bcae
-
SHA1
428432076c1be3fee33a689b57c8d43a7e91ad56
-
SHA256
afc4bb4b46c0f16e0b7ed4cc621bcb57c3b7b25deb3d5aab5a8b9f8b10ba9f8b
-
SHA512
fb6d0f1d48e26ae0305b7bf89d81146ec74fde5207a0b8c1efdaddb042949efaddf0f421f04a24c2a6a5ceb649551cc34661ee159e1d98ede74013e31b480050
-
SSDEEP
1536:+Uk8RgDXz7Kx8zzgmTlvtKrNCpbXmsz4tHu:Tk8yn7KdmTINQXzz44
Static task
static1
Behavioral task
behavioral1
Sample
afc4bb4b46c0f16e0b7ed4cc621bcb57c3b7b25deb3d5aab5a8b9f8b10ba9f8b.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
112.175.88.207
112.175.88.208
Targets
-
-
Target
afc4bb4b46c0f16e0b7ed4cc621bcb57c3b7b25deb3d5aab5a8b9f8b10ba9f8b
-
Size
73KB
-
MD5
e42775cac1beb83c84030665aa63bcae
-
SHA1
428432076c1be3fee33a689b57c8d43a7e91ad56
-
SHA256
afc4bb4b46c0f16e0b7ed4cc621bcb57c3b7b25deb3d5aab5a8b9f8b10ba9f8b
-
SHA512
fb6d0f1d48e26ae0305b7bf89d81146ec74fde5207a0b8c1efdaddb042949efaddf0f421f04a24c2a6a5ceb649551cc34661ee159e1d98ede74013e31b480050
-
SSDEEP
1536:+Uk8RgDXz7Kx8zzgmTlvtKrNCpbXmsz4tHu:Tk8yn7KdmTINQXzz44
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-