General
-
Target
2548bd07094d7332d8453d7ec85e27d37f6cdd35756c460a3471899ce759e098.exe
-
Size
71KB
-
Sample
241117-nlvx1syhjr
-
MD5
5cc35f43952082ee1ba69f43df780768
-
SHA1
fa6b3e264bada2a2a43257d6618282358e8b59a8
-
SHA256
2548bd07094d7332d8453d7ec85e27d37f6cdd35756c460a3471899ce759e098
-
SHA512
91301178d59864d0bffac4ec8352bc127504744c1a7da55ac42cab11e06d362572703ca991e2480fa1348843ea9df68700e2bb30a78c96ff49aaf787298465d3
-
SSDEEP
1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCarawE:yLAYUzmdD0sMQl7d7IuhCae7
Static task
static1
Behavioral task
behavioral1
Sample
2548bd07094d7332d8453d7ec85e27d37f6cdd35756c460a3471899ce759e098.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
2548bd07094d7332d8453d7ec85e27d37f6cdd35756c460a3471899ce759e098.exe
-
Size
71KB
-
MD5
5cc35f43952082ee1ba69f43df780768
-
SHA1
fa6b3e264bada2a2a43257d6618282358e8b59a8
-
SHA256
2548bd07094d7332d8453d7ec85e27d37f6cdd35756c460a3471899ce759e098
-
SHA512
91301178d59864d0bffac4ec8352bc127504744c1a7da55ac42cab11e06d362572703ca991e2480fa1348843ea9df68700e2bb30a78c96ff49aaf787298465d3
-
SSDEEP
1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCarawE:yLAYUzmdD0sMQl7d7IuhCae7
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-