General
-
Target
663a4dd3a5a074e4f1a0fbaa37f39d7d3c3b3444c1aa2c85fa72d6fae0f5caa2
-
Size
51KB
-
Sample
241119-3gzsqswbrm
-
MD5
44cce61aef1505565c26b5a6a4feb431
-
SHA1
8d0055e802ca471807788767931b878f555133c5
-
SHA256
663a4dd3a5a074e4f1a0fbaa37f39d7d3c3b3444c1aa2c85fa72d6fae0f5caa2
-
SHA512
0de33dc74e5bf058dd957e5453f4443df04672c08ec2e5138e0a83403fa7ea39893948ce8b673878b609c2ce8537aa14bacb61ed9abde3fc8982223cfd357582
-
SSDEEP
1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhj:KsdXfBo/DBJBGzkP5j
Static task
static1
Behavioral task
behavioral1
Sample
663a4dd3a5a074e4f1a0fbaa37f39d7d3c3b3444c1aa2c85fa72d6fae0f5caa2.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
121.88.5.183
218.54.28.139
Targets
-
-
Target
663a4dd3a5a074e4f1a0fbaa37f39d7d3c3b3444c1aa2c85fa72d6fae0f5caa2
-
Size
51KB
-
MD5
44cce61aef1505565c26b5a6a4feb431
-
SHA1
8d0055e802ca471807788767931b878f555133c5
-
SHA256
663a4dd3a5a074e4f1a0fbaa37f39d7d3c3b3444c1aa2c85fa72d6fae0f5caa2
-
SHA512
0de33dc74e5bf058dd957e5453f4443df04672c08ec2e5138e0a83403fa7ea39893948ce8b673878b609c2ce8537aa14bacb61ed9abde3fc8982223cfd357582
-
SSDEEP
1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhj:KsdXfBo/DBJBGzkP5j
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-