General
-
Target
d4c7b27c007526731d30437bc073a62bb364616a002f7f8de68c51af0ee31054.exe
-
Size
336KB
-
Sample
241120-zbbbeatcnr
-
MD5
576b6da86304134c0e1d4bcbbaea25e2
-
SHA1
66f6b9dd4ae078a635dd0d085602be189702a7f1
-
SHA256
d4c7b27c007526731d30437bc073a62bb364616a002f7f8de68c51af0ee31054
-
SHA512
40519e23501af34e1a61b80b0efe180f0a4fa97119f89a43acdbcd96dc07d5b0ddd1d125cfa525729fdc10867a448d44e00bbc763b4023350eab474633c5fd35
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYM:vHW138/iXWlK885rKlGSekcj66cix
Static task
static1
Behavioral task
behavioral1
Sample
d4c7b27c007526731d30437bc073a62bb364616a002f7f8de68c51af0ee31054.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
d4c7b27c007526731d30437bc073a62bb364616a002f7f8de68c51af0ee31054.exe
-
Size
336KB
-
MD5
576b6da86304134c0e1d4bcbbaea25e2
-
SHA1
66f6b9dd4ae078a635dd0d085602be189702a7f1
-
SHA256
d4c7b27c007526731d30437bc073a62bb364616a002f7f8de68c51af0ee31054
-
SHA512
40519e23501af34e1a61b80b0efe180f0a4fa97119f89a43acdbcd96dc07d5b0ddd1d125cfa525729fdc10867a448d44e00bbc763b4023350eab474633c5fd35
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYM:vHW138/iXWlK885rKlGSekcj66cix
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-