General
-
Target
be097d755dc5d6a722a4182c1e16f9f3613f530ee90021ce54fdb89015b8bb81
-
Size
51KB
-
Sample
241120-dn1aeazfnq
-
MD5
8b92e2fbfc42d62f866f80d50e31bd08
-
SHA1
48fda0fafde62c48c1f26bcc5e0bf2df15980cc4
-
SHA256
be097d755dc5d6a722a4182c1e16f9f3613f530ee90021ce54fdb89015b8bb81
-
SHA512
d4aa82694a5f076d56ac0d70495176e175086d00f7ef4ad022c52c1a378d4896eec1f588b62345a443e17aaa7ae899c1ea06e14ce5a17ad11ff01f37e892f05e
-
SSDEEP
1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhPyj:KsdXfBo/DBJBGzkP5Pyj
Static task
static1
Behavioral task
behavioral1
Sample
be097d755dc5d6a722a4182c1e16f9f3613f530ee90021ce54fdb89015b8bb81.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
121.88.5.183
218.54.28.139
Targets
-
-
Target
be097d755dc5d6a722a4182c1e16f9f3613f530ee90021ce54fdb89015b8bb81
-
Size
51KB
-
MD5
8b92e2fbfc42d62f866f80d50e31bd08
-
SHA1
48fda0fafde62c48c1f26bcc5e0bf2df15980cc4
-
SHA256
be097d755dc5d6a722a4182c1e16f9f3613f530ee90021ce54fdb89015b8bb81
-
SHA512
d4aa82694a5f076d56ac0d70495176e175086d00f7ef4ad022c52c1a378d4896eec1f588b62345a443e17aaa7ae899c1ea06e14ce5a17ad11ff01f37e892f05e
-
SSDEEP
1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhPyj:KsdXfBo/DBJBGzkP5Pyj
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-