General
-
Target
e3fd3ffc0a4fb6fe6e271cf67fc3799c1f71132d4f28c87092107cf937c576a8N.exe
-
Size
51KB
-
Sample
241119-ask5hayeqn
-
MD5
65349de459189f13cdadde2784006010
-
SHA1
532619074c8331ed9aca3da4fd28f15633673bd8
-
SHA256
e3fd3ffc0a4fb6fe6e271cf67fc3799c1f71132d4f28c87092107cf937c576a8
-
SHA512
734bdfed64f41e6291757f22e9cc72a0c2b37c44bbadd85b59ef519044ee52eb8d37f69bd4d5421e97e946b5231ded22fe1d861647328fb0514673d4b5e5517c
-
SSDEEP
1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhPU:KsdXfBo/DBJBGzkP5PU
Static task
static1
Behavioral task
behavioral1
Sample
e3fd3ffc0a4fb6fe6e271cf67fc3799c1f71132d4f28c87092107cf937c576a8N.exe
Resource
win7-20240708-en
Malware Config
Extracted
urelas
121.88.5.183
218.54.28.139
Targets
-
-
Target
e3fd3ffc0a4fb6fe6e271cf67fc3799c1f71132d4f28c87092107cf937c576a8N.exe
-
Size
51KB
-
MD5
65349de459189f13cdadde2784006010
-
SHA1
532619074c8331ed9aca3da4fd28f15633673bd8
-
SHA256
e3fd3ffc0a4fb6fe6e271cf67fc3799c1f71132d4f28c87092107cf937c576a8
-
SHA512
734bdfed64f41e6291757f22e9cc72a0c2b37c44bbadd85b59ef519044ee52eb8d37f69bd4d5421e97e946b5231ded22fe1d861647328fb0514673d4b5e5517c
-
SSDEEP
1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhPU:KsdXfBo/DBJBGzkP5PU
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-