General
-
Target
08aead7273082b7d71818151a30eb3b88a53a7363fa014b7d250ec98e31f273c.exe
-
Size
334KB
-
Sample
241119-ldymtsthkr
-
MD5
a028ad301750d80f90286320c4447dd0
-
SHA1
d21f9b6e7516b5af96caaaaf600f2cdef94fa9cf
-
SHA256
08aead7273082b7d71818151a30eb3b88a53a7363fa014b7d250ec98e31f273c
-
SHA512
0d31a15091e37fe85b65b16dbc4bc8adb6f66987913824c160ab708047d51a3f96fa946a6553705cd4b39bbd9709c2d238950719e5ee14d2e0f82a9db23efdba
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYm:vHW138/iXWlK885rKlGSekcj66cix
Static task
static1
Behavioral task
behavioral1
Sample
08aead7273082b7d71818151a30eb3b88a53a7363fa014b7d250ec98e31f273c.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
08aead7273082b7d71818151a30eb3b88a53a7363fa014b7d250ec98e31f273c.exe
-
Size
334KB
-
MD5
a028ad301750d80f90286320c4447dd0
-
SHA1
d21f9b6e7516b5af96caaaaf600f2cdef94fa9cf
-
SHA256
08aead7273082b7d71818151a30eb3b88a53a7363fa014b7d250ec98e31f273c
-
SHA512
0d31a15091e37fe85b65b16dbc4bc8adb6f66987913824c160ab708047d51a3f96fa946a6553705cd4b39bbd9709c2d238950719e5ee14d2e0f82a9db23efdba
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYm:vHW138/iXWlK885rKlGSekcj66cix
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-