General
-
Target
83b591f5ea6d9131d736b8fbf255ff5f691d84ad8625778f959295764575067e.exe
-
Size
51KB
-
Sample
241115-q6dwcaveke
-
MD5
5a8ebbdc35e6a3caecfa66340826e192
-
SHA1
0969613872152b004fe0bcb876ac384782ce8f4f
-
SHA256
83b591f5ea6d9131d736b8fbf255ff5f691d84ad8625778f959295764575067e
-
SHA512
0a5ed23df12d2763119c08fdf7f50882369f33f96fcdab6f66b728a262e307f212f370b8208fc048feaa4e6cbfc905335e6dd9ad8a637acad43709024e78092c
-
SSDEEP
1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhP4:KsdXfBo/DBJBGzkP5P4
Static task
static1
Behavioral task
behavioral1
Sample
83b591f5ea6d9131d736b8fbf255ff5f691d84ad8625778f959295764575067e.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
121.88.5.183
218.54.28.139
Targets
-
-
Target
83b591f5ea6d9131d736b8fbf255ff5f691d84ad8625778f959295764575067e.exe
-
Size
51KB
-
MD5
5a8ebbdc35e6a3caecfa66340826e192
-
SHA1
0969613872152b004fe0bcb876ac384782ce8f4f
-
SHA256
83b591f5ea6d9131d736b8fbf255ff5f691d84ad8625778f959295764575067e
-
SHA512
0a5ed23df12d2763119c08fdf7f50882369f33f96fcdab6f66b728a262e307f212f370b8208fc048feaa4e6cbfc905335e6dd9ad8a637acad43709024e78092c
-
SSDEEP
1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhP4:KsdXfBo/DBJBGzkP5P4
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-