General
-
Target
2cb3923b42874722c2a3275f0153e973dee3c15b72f51945482a49c1bc9d851eN.exe
-
Size
334KB
-
Sample
241116-w9r52a1jb1
-
MD5
56ab5b6ddbcd5b119c7ad028db7df480
-
SHA1
ee8b233b1f7a6cc3cb4b8d06dad01f8ff1a90822
-
SHA256
2cb3923b42874722c2a3275f0153e973dee3c15b72f51945482a49c1bc9d851e
-
SHA512
d63d76b5cfe18645213025cff3515827712403808779880758b539fc981450786aa3a3392009e9b8b641a8fa8ba70a03f70f0714f68b4960ba158f0afa326f25
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYw6:vHW138/iXWlK885rKlGSekcj66ciV6
Static task
static1
Behavioral task
behavioral1
Sample
2cb3923b42874722c2a3275f0153e973dee3c15b72f51945482a49c1bc9d851eN.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
2cb3923b42874722c2a3275f0153e973dee3c15b72f51945482a49c1bc9d851eN.exe
-
Size
334KB
-
MD5
56ab5b6ddbcd5b119c7ad028db7df480
-
SHA1
ee8b233b1f7a6cc3cb4b8d06dad01f8ff1a90822
-
SHA256
2cb3923b42874722c2a3275f0153e973dee3c15b72f51945482a49c1bc9d851e
-
SHA512
d63d76b5cfe18645213025cff3515827712403808779880758b539fc981450786aa3a3392009e9b8b641a8fa8ba70a03f70f0714f68b4960ba158f0afa326f25
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYw6:vHW138/iXWlK885rKlGSekcj66ciV6
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-