General
-
Target
53b499634bfb159fb960f58958ffd4b8338c83a26c9f1b7ddc204aefc9ef3c36.exe
-
Size
448KB
-
Sample
241116-l65lvavbkd
-
MD5
237bf8b80379fecacc1952cf482542a9
-
SHA1
07c0b8b89b202ada728a9f8a2ee0b967bbe42ece
-
SHA256
53b499634bfb159fb960f58958ffd4b8338c83a26c9f1b7ddc204aefc9ef3c36
-
SHA512
ba08ecc6e6acb0dd8d552e7f8a376263aab28a364912edf921c2f25d7e125959616e3052773b4438b5fb94ae91074e1ec3a278f6edc5440be2ac1769220430b2
-
SSDEEP
6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFb:CMpASIcWYx2U6hAJQn6
Behavioral task
behavioral1
Sample
53b499634bfb159fb960f58958ffd4b8338c83a26c9f1b7ddc204aefc9ef3c36.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
53b499634bfb159fb960f58958ffd4b8338c83a26c9f1b7ddc204aefc9ef3c36.exe
-
Size
448KB
-
MD5
237bf8b80379fecacc1952cf482542a9
-
SHA1
07c0b8b89b202ada728a9f8a2ee0b967bbe42ece
-
SHA256
53b499634bfb159fb960f58958ffd4b8338c83a26c9f1b7ddc204aefc9ef3c36
-
SHA512
ba08ecc6e6acb0dd8d552e7f8a376263aab28a364912edf921c2f25d7e125959616e3052773b4438b5fb94ae91074e1ec3a278f6edc5440be2ac1769220430b2
-
SSDEEP
6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFb:CMpASIcWYx2U6hAJQn6
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-