General
-
Target
615441dbd919e62416c21413f070c62d99581e09d5f82bf233c616df2642009cN.exe
-
Size
71KB
-
Sample
241117-a7f44axepg
-
MD5
57be52759311868699102199c2b94800
-
SHA1
b71e730b4f07da4cf41a3f44cb9617e69b114cca
-
SHA256
615441dbd919e62416c21413f070c62d99581e09d5f82bf233c616df2642009c
-
SHA512
3a2560e47c0e37ddc3fde64f9873411dc956d0a49544603ef316b3cff5eb47702f819e405baf3011aa404fb808e8e5434a266aa44738bf05a6c9fb6010c0b44e
-
SSDEEP
1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCaraw:yLAYUzmdD0sMQl7d7IuhCae
Static task
static1
Behavioral task
behavioral1
Sample
615441dbd919e62416c21413f070c62d99581e09d5f82bf233c616df2642009cN.exe
Resource
win7-20240729-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
615441dbd919e62416c21413f070c62d99581e09d5f82bf233c616df2642009cN.exe
-
Size
71KB
-
MD5
57be52759311868699102199c2b94800
-
SHA1
b71e730b4f07da4cf41a3f44cb9617e69b114cca
-
SHA256
615441dbd919e62416c21413f070c62d99581e09d5f82bf233c616df2642009c
-
SHA512
3a2560e47c0e37ddc3fde64f9873411dc956d0a49544603ef316b3cff5eb47702f819e405baf3011aa404fb808e8e5434a266aa44738bf05a6c9fb6010c0b44e
-
SSDEEP
1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCaraw:yLAYUzmdD0sMQl7d7IuhCae
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-