General
-
Target
2c97d07e0a67cecf264dabe0050159919485b35c446663f7acdb52976faed596.exe
-
Size
332KB
-
Sample
241117-ckmz8ssqgj
-
MD5
a375c594a60d55f023e637ef9a2449a8
-
SHA1
c2d67e9b8116c42ab86328c04c417449a4ac72f1
-
SHA256
2c97d07e0a67cecf264dabe0050159919485b35c446663f7acdb52976faed596
-
SHA512
cfbacec71da430e56429b2986ed4b0d2ea44271f86c442632d9df03c27d14484bf3a821c056cbc938bb3ed7baa18e7ca3bea95ed9eb372248f717c4fb965c979
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVVs:vHW138/iXWlK885rKlGSekcj66ciEVs
Static task
static1
Behavioral task
behavioral1
Sample
2c97d07e0a67cecf264dabe0050159919485b35c446663f7acdb52976faed596.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
2c97d07e0a67cecf264dabe0050159919485b35c446663f7acdb52976faed596.exe
-
Size
332KB
-
MD5
a375c594a60d55f023e637ef9a2449a8
-
SHA1
c2d67e9b8116c42ab86328c04c417449a4ac72f1
-
SHA256
2c97d07e0a67cecf264dabe0050159919485b35c446663f7acdb52976faed596
-
SHA512
cfbacec71da430e56429b2986ed4b0d2ea44271f86c442632d9df03c27d14484bf3a821c056cbc938bb3ed7baa18e7ca3bea95ed9eb372248f717c4fb965c979
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVVs:vHW138/iXWlK885rKlGSekcj66ciEVs
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-