General
-
Target
daa7b5dca06e54f27db21d13961ef00adb564c8d59f7cc9948f6ffc172c69215N.exe
-
Size
50KB
-
Sample
241119-t454laxrhz
-
MD5
2743420ec42947d037ee9a6c07198d60
-
SHA1
db75ed36a9b8f4a9ba633f55a7de753b0f52b789
-
SHA256
daa7b5dca06e54f27db21d13961ef00adb564c8d59f7cc9948f6ffc172c69215
-
SHA512
665dc207bd9100789b50a3ccbdc9fe32e6edabdfb8d3039163ffcfcfe543103a825a4779bce9aadc5c219cfa6833f7bc51a0ef44995278721a8014dc83566ca8
-
SSDEEP
1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhd:KsdXfBo/DBJBGzkP5d
Static task
static1
Behavioral task
behavioral1
Sample
daa7b5dca06e54f27db21d13961ef00adb564c8d59f7cc9948f6ffc172c69215N.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
121.88.5.183
218.54.28.139
Targets
-
-
Target
daa7b5dca06e54f27db21d13961ef00adb564c8d59f7cc9948f6ffc172c69215N.exe
-
Size
50KB
-
MD5
2743420ec42947d037ee9a6c07198d60
-
SHA1
db75ed36a9b8f4a9ba633f55a7de753b0f52b789
-
SHA256
daa7b5dca06e54f27db21d13961ef00adb564c8d59f7cc9948f6ffc172c69215
-
SHA512
665dc207bd9100789b50a3ccbdc9fe32e6edabdfb8d3039163ffcfcfe543103a825a4779bce9aadc5c219cfa6833f7bc51a0ef44995278721a8014dc83566ca8
-
SSDEEP
1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhd:KsdXfBo/DBJBGzkP5d
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-