General
-
Target
3992c40a3facb1621e3289a8f27de223643c750846bc3df81b9bed3c8312116b
-
Size
332KB
-
Sample
241119-z8b9zaxqdp
-
MD5
0c532605bd6041f0da53a6a9ade4ccc1
-
SHA1
b94d3dd6f45d0553004adc2672ce539f4ea8d613
-
SHA256
3992c40a3facb1621e3289a8f27de223643c750846bc3df81b9bed3c8312116b
-
SHA512
2019433e7f79bac22372cf967745ee5113a19507a523f48cc896e6ca4a769702f448770e11bef8656a9485038bf41eb72c25b203d1897ebc6a128fa0c72f6d87
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY+:vHW138/iXWlK885rKlGSekcj66ciL
Static task
static1
Behavioral task
behavioral1
Sample
3992c40a3facb1621e3289a8f27de223643c750846bc3df81b9bed3c8312116b.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
3992c40a3facb1621e3289a8f27de223643c750846bc3df81b9bed3c8312116b
-
Size
332KB
-
MD5
0c532605bd6041f0da53a6a9ade4ccc1
-
SHA1
b94d3dd6f45d0553004adc2672ce539f4ea8d613
-
SHA256
3992c40a3facb1621e3289a8f27de223643c750846bc3df81b9bed3c8312116b
-
SHA512
2019433e7f79bac22372cf967745ee5113a19507a523f48cc896e6ca4a769702f448770e11bef8656a9485038bf41eb72c25b203d1897ebc6a128fa0c72f6d87
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY+:vHW138/iXWlK885rKlGSekcj66ciL
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-