General
-
Target
6d07c5b41747406f524ab7a64b2789df6aa7bfef6a654ef0bfb42c1accae67a1.exe
-
Size
60KB
-
Sample
241121-jhwmxszmaz
-
MD5
3bfc5f40fa267b955e157718c545402a
-
SHA1
9aad00ecb33780e15c68506ec4cdbd4146408fb7
-
SHA256
6d07c5b41747406f524ab7a64b2789df6aa7bfef6a654ef0bfb42c1accae67a1
-
SHA512
783e33b1cf025df0a287e72c607bc1f648ef3d2845ec70c209e13e525b279880ff718d0cefb0614e9b6654d53f962bff500e2d03c9108919de495c8bfa9ec335
-
SSDEEP
768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPY:nK0GjMeQG3iaQREuVZ6ro29p4YxbKd5t
Static task
static1
Behavioral task
behavioral1
Sample
6d07c5b41747406f524ab7a64b2789df6aa7bfef6a654ef0bfb42c1accae67a1.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
6d07c5b41747406f524ab7a64b2789df6aa7bfef6a654ef0bfb42c1accae67a1.exe
-
Size
60KB
-
MD5
3bfc5f40fa267b955e157718c545402a
-
SHA1
9aad00ecb33780e15c68506ec4cdbd4146408fb7
-
SHA256
6d07c5b41747406f524ab7a64b2789df6aa7bfef6a654ef0bfb42c1accae67a1
-
SHA512
783e33b1cf025df0a287e72c607bc1f648ef3d2845ec70c209e13e525b279880ff718d0cefb0614e9b6654d53f962bff500e2d03c9108919de495c8bfa9ec335
-
SSDEEP
768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPY:nK0GjMeQG3iaQREuVZ6ro29p4YxbKd5t
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-