General
-
Target
22fe8b86056cc28b39eed6b539e447af5ab0b036329784978a849b316e3fc429.exe
-
Size
621KB
-
Sample
241121-ahrjja1ldm
-
MD5
f61a413e1e72f6b12bafe0daf6a43065
-
SHA1
749c7a8634e4e761c6a25beb5e9d1708e115adc4
-
SHA256
22fe8b86056cc28b39eed6b539e447af5ab0b036329784978a849b316e3fc429
-
SHA512
41ea3f80938116195484ca47c98d1682541a9e1b9e9461163f5533c5f0f1ac39c913f24e7cdefb24197a90c084f3b539bf48c1a1eb92a5d86eb1db2ef0fa6934
-
SSDEEP
6144:imbmLppYOuakYGWV5Q4XMxvQ4x1OpGcm9VQl0lM/oJ4/gupXWyKV:ima6idv8zzkGHVqoq/gKWd
Behavioral task
behavioral1
Sample
22fe8b86056cc28b39eed6b539e447af5ab0b036329784978a849b316e3fc429.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
Targets
-
-
Target
22fe8b86056cc28b39eed6b539e447af5ab0b036329784978a849b316e3fc429.exe
-
Size
621KB
-
MD5
f61a413e1e72f6b12bafe0daf6a43065
-
SHA1
749c7a8634e4e761c6a25beb5e9d1708e115adc4
-
SHA256
22fe8b86056cc28b39eed6b539e447af5ab0b036329784978a849b316e3fc429
-
SHA512
41ea3f80938116195484ca47c98d1682541a9e1b9e9461163f5533c5f0f1ac39c913f24e7cdefb24197a90c084f3b539bf48c1a1eb92a5d86eb1db2ef0fa6934
-
SSDEEP
6144:imbmLppYOuakYGWV5Q4XMxvQ4x1OpGcm9VQl0lM/oJ4/gupXWyKV:ima6idv8zzkGHVqoq/gKWd
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-