General
-
Target
d5427dae893551cfc421e02625959ca41364913b8027e563ed09e12949f6004cN.exe
-
Size
67KB
-
Sample
241117-ead1pazhpb
-
MD5
f1ba7e7daa26e1a542944395df534770
-
SHA1
d65578addcab5f360ee4cc3e18071c4ff48b4c65
-
SHA256
d5427dae893551cfc421e02625959ca41364913b8027e563ed09e12949f6004c
-
SHA512
0c1ec46a3a521c4e8d2114efef7afaa501a8d42b07f7580716df712ab7d13fe664e7bf983b8858579f5f120649682a8c6824cc712858743764053ca6e3216f3c
-
SSDEEP
1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCare4:yLAYUzmdD0sMQl7d7IuhCai4
Static task
static1
Behavioral task
behavioral1
Sample
d5427dae893551cfc421e02625959ca41364913b8027e563ed09e12949f6004cN.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
d5427dae893551cfc421e02625959ca41364913b8027e563ed09e12949f6004cN.exe
-
Size
67KB
-
MD5
f1ba7e7daa26e1a542944395df534770
-
SHA1
d65578addcab5f360ee4cc3e18071c4ff48b4c65
-
SHA256
d5427dae893551cfc421e02625959ca41364913b8027e563ed09e12949f6004c
-
SHA512
0c1ec46a3a521c4e8d2114efef7afaa501a8d42b07f7580716df712ab7d13fe664e7bf983b8858579f5f120649682a8c6824cc712858743764053ca6e3216f3c
-
SSDEEP
1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCare4:yLAYUzmdD0sMQl7d7IuhCai4
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-