General
-
Target
c3b764212020bc5880a8c35fe63d09f56e974af94ddfd8dd5e4cb373892b182b
-
Size
333KB
-
Sample
241118-fev1faydqg
-
MD5
1451a4312a14a1ac2cfa72abc1c76b74
-
SHA1
e0a59172e30587cf9bbef9f917f8bb3735dbb901
-
SHA256
c3b764212020bc5880a8c35fe63d09f56e974af94ddfd8dd5e4cb373892b182b
-
SHA512
2f1c8bb8b61241860dd820f43aa79f59ca700c08014d0be9dcc7a17b121e849fade8460a7d6b0cf1f8ee98b0f0efcd18226746995c8bd18d549bfa9b5c1387d3
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYX:vHW138/iXWlK885rKlGSekcj66cii
Static task
static1
Behavioral task
behavioral1
Sample
c3b764212020bc5880a8c35fe63d09f56e974af94ddfd8dd5e4cb373892b182b.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
c3b764212020bc5880a8c35fe63d09f56e974af94ddfd8dd5e4cb373892b182b
-
Size
333KB
-
MD5
1451a4312a14a1ac2cfa72abc1c76b74
-
SHA1
e0a59172e30587cf9bbef9f917f8bb3735dbb901
-
SHA256
c3b764212020bc5880a8c35fe63d09f56e974af94ddfd8dd5e4cb373892b182b
-
SHA512
2f1c8bb8b61241860dd820f43aa79f59ca700c08014d0be9dcc7a17b121e849fade8460a7d6b0cf1f8ee98b0f0efcd18226746995c8bd18d549bfa9b5c1387d3
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYX:vHW138/iXWlK885rKlGSekcj66cii
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-