General
-
Target
ede30f30c5ec0f59425d89815c4c13fdd5fa415eb098bf9ad050ef6048cb4d5b.exe
-
Size
94KB
-
Sample
241118-rg23basrhl
-
MD5
e9fb6d14e584d96eae44b8d9a380caa6
-
SHA1
611d3f60f2dbb46a727e459da37c0555cf311373
-
SHA256
ede30f30c5ec0f59425d89815c4c13fdd5fa415eb098bf9ad050ef6048cb4d5b
-
SHA512
cfa7629271dbf5adc9ea587162d9a6f7f9eef9729f40102136032277987fca2b655b57792df119b7d0ddbbb7b8c51699ee78f1ec3fd6b2b806b45bef7bba820b
-
SSDEEP
1536:nwhq8V9IpPf2lgiIJ4pivJnuNVueC39GdBR3M9cH:nqV9MziU4piRun7C3CP3M0
Static task
static1
Behavioral task
behavioral1
Sample
ede30f30c5ec0f59425d89815c4c13fdd5fa415eb098bf9ad050ef6048cb4d5b.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
112.175.88.208
112.175.88.209
112.175.88.207
Targets
-
-
Target
ede30f30c5ec0f59425d89815c4c13fdd5fa415eb098bf9ad050ef6048cb4d5b.exe
-
Size
94KB
-
MD5
e9fb6d14e584d96eae44b8d9a380caa6
-
SHA1
611d3f60f2dbb46a727e459da37c0555cf311373
-
SHA256
ede30f30c5ec0f59425d89815c4c13fdd5fa415eb098bf9ad050ef6048cb4d5b
-
SHA512
cfa7629271dbf5adc9ea587162d9a6f7f9eef9729f40102136032277987fca2b655b57792df119b7d0ddbbb7b8c51699ee78f1ec3fd6b2b806b45bef7bba820b
-
SSDEEP
1536:nwhq8V9IpPf2lgiIJ4pivJnuNVueC39GdBR3M9cH:nqV9MziU4piRun7C3CP3M0
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-