General
-
Target
514cb875496dcf6bc5e35a95a11993a6cc951d3dcc123b284a9457d22c410254
-
Size
51KB
-
Sample
241115-1x1c4awrfm
-
MD5
57b846a6a331f151b127fe0c4a3a90f6
-
SHA1
33e3caedd0a30c5085446f5d38527caca05d8a16
-
SHA256
514cb875496dcf6bc5e35a95a11993a6cc951d3dcc123b284a9457d22c410254
-
SHA512
af56559ddc4b887cd34039008e443d24d023e28e8e18596e9900a030fd7953c3e516cead58527280f120dbc9375435a7a2459c46f1dfd5776a5fd29c65d8bc6d
-
SSDEEP
1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhP5:KsdXfBo/DBJBGzkP5P5
Static task
static1
Behavioral task
behavioral1
Sample
514cb875496dcf6bc5e35a95a11993a6cc951d3dcc123b284a9457d22c410254.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
121.88.5.183
218.54.28.139
Targets
-
-
Target
514cb875496dcf6bc5e35a95a11993a6cc951d3dcc123b284a9457d22c410254
-
Size
51KB
-
MD5
57b846a6a331f151b127fe0c4a3a90f6
-
SHA1
33e3caedd0a30c5085446f5d38527caca05d8a16
-
SHA256
514cb875496dcf6bc5e35a95a11993a6cc951d3dcc123b284a9457d22c410254
-
SHA512
af56559ddc4b887cd34039008e443d24d023e28e8e18596e9900a030fd7953c3e516cead58527280f120dbc9375435a7a2459c46f1dfd5776a5fd29c65d8bc6d
-
SSDEEP
1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhP5:KsdXfBo/DBJBGzkP5P5
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-