General
-
Target
b9a4ef2e93da2c76fdf66f0054078c993adb4aba091449213f95920f7760d341
-
Size
333KB
-
Sample
241118-exw5satkcn
-
MD5
7c52fa1dc9e1c5e59b28723dfab0a5b6
-
SHA1
90838f4318a86b255e60c6d6d44faabcf7a3e254
-
SHA256
b9a4ef2e93da2c76fdf66f0054078c993adb4aba091449213f95920f7760d341
-
SHA512
52110668c323a0e6fb653f7aa17c28ad5fa4f30bf6cba9e582f89b1ad4004b8596d4bc534b52c3f31b530298878caf01342c5979ea4edcb5f8d96b5a98805d52
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYiU:vHW138/iXWlK885rKlGSekcj66ci/U
Static task
static1
Behavioral task
behavioral1
Sample
b9a4ef2e93da2c76fdf66f0054078c993adb4aba091449213f95920f7760d341.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
b9a4ef2e93da2c76fdf66f0054078c993adb4aba091449213f95920f7760d341
-
Size
333KB
-
MD5
7c52fa1dc9e1c5e59b28723dfab0a5b6
-
SHA1
90838f4318a86b255e60c6d6d44faabcf7a3e254
-
SHA256
b9a4ef2e93da2c76fdf66f0054078c993adb4aba091449213f95920f7760d341
-
SHA512
52110668c323a0e6fb653f7aa17c28ad5fa4f30bf6cba9e582f89b1ad4004b8596d4bc534b52c3f31b530298878caf01342c5979ea4edcb5f8d96b5a98805d52
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYiU:vHW138/iXWlK885rKlGSekcj66ci/U
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-