General
-
Target
41cb2ed3a414003a5c88ec6e28131ea28a0395e8ccbe541113e2a3343fddc4bf
-
Size
55KB
-
Sample
241117-22spgszhjc
-
MD5
a25ddf0fd1ed5c42d60a8b1fd7df0cd1
-
SHA1
c98951417f3117899f0c63a5097f9fe0a8f4d43d
-
SHA256
41cb2ed3a414003a5c88ec6e28131ea28a0395e8ccbe541113e2a3343fddc4bf
-
SHA512
ece28ec1ffff9cfe6d49d8846232606ab2713dd2fc3416bde8ae884297b025165d46899b67a129f05be122a63afd4b120d6f5b3107e11553c3e3ce881e1899de
-
SSDEEP
1536:qw788avzI+on+TqOK0cHMqtzMLvWsrupwnTf1GqT7E:qwda7KVr0cHneunw1E
Static task
static1
Behavioral task
behavioral1
Sample
41cb2ed3a414003a5c88ec6e28131ea28a0395e8ccbe541113e2a3343fddc4bf.exe
Resource
win7-20241023-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
41cb2ed3a414003a5c88ec6e28131ea28a0395e8ccbe541113e2a3343fddc4bf
-
Size
55KB
-
MD5
a25ddf0fd1ed5c42d60a8b1fd7df0cd1
-
SHA1
c98951417f3117899f0c63a5097f9fe0a8f4d43d
-
SHA256
41cb2ed3a414003a5c88ec6e28131ea28a0395e8ccbe541113e2a3343fddc4bf
-
SHA512
ece28ec1ffff9cfe6d49d8846232606ab2713dd2fc3416bde8ae884297b025165d46899b67a129f05be122a63afd4b120d6f5b3107e11553c3e3ce881e1899de
-
SSDEEP
1536:qw788avzI+on+TqOK0cHMqtzMLvWsrupwnTf1GqT7E:qwda7KVr0cHneunw1E
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-