General
-
Target
88fa7feef0a78cae6f42599c78f4ee73b4f3e642f157e60aa7a3bc1ae7c7886bN.exe
-
Size
68KB
-
Sample
241119-zpxrkataln
-
MD5
78632bdfe9d5cf884b60a6b801fba1c0
-
SHA1
3356a1ed5c38806c4182078f93805330994cb90f
-
SHA256
88fa7feef0a78cae6f42599c78f4ee73b4f3e642f157e60aa7a3bc1ae7c7886b
-
SHA512
0b5b33705fe8f7c907bdf45c6428652155354c173e4307e8d17ea2f8389ffe02b7ed291a335a8f741a80f4d24e020e27c8a40d45952932ec556d07a6685a372b
-
SSDEEP
1536:04/WgLAjdZsp+uChoLnDeoqYAJjvLFymnHsPeOrm:l//AjMp+u2onejH2PeEm
Static task
static1
Behavioral task
behavioral1
Sample
88fa7feef0a78cae6f42599c78f4ee73b4f3e642f157e60aa7a3bc1ae7c7886bN.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
88fa7feef0a78cae6f42599c78f4ee73b4f3e642f157e60aa7a3bc1ae7c7886bN.exe
-
Size
68KB
-
MD5
78632bdfe9d5cf884b60a6b801fba1c0
-
SHA1
3356a1ed5c38806c4182078f93805330994cb90f
-
SHA256
88fa7feef0a78cae6f42599c78f4ee73b4f3e642f157e60aa7a3bc1ae7c7886b
-
SHA512
0b5b33705fe8f7c907bdf45c6428652155354c173e4307e8d17ea2f8389ffe02b7ed291a335a8f741a80f4d24e020e27c8a40d45952932ec556d07a6685a372b
-
SSDEEP
1536:04/WgLAjdZsp+uChoLnDeoqYAJjvLFymnHsPeOrm:l//AjMp+u2onejH2PeEm
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-