General
-
Target
81faf47e279217ddb4f9ef8f147697c7fb80a1f36464b801c774d34dcb99a11dN.exe
-
Size
274KB
-
Sample
241122-2n2egaxlgk
-
MD5
a153677f0478feae8acc9e7d88da37b0
-
SHA1
491ec8d033805fb58a0879d27521670386ec48fe
-
SHA256
81faf47e279217ddb4f9ef8f147697c7fb80a1f36464b801c774d34dcb99a11d
-
SHA512
a216626d8a7498bcc247aa20647382202c4cf851bb1dc54b19138636006b1762a318e581b46997bb020c21d2f244a10e98ded600ba68598979fa2980f3f22b7b
-
SSDEEP
3072:pp56zRJ83+OJ7NoGvdwWy6k04yW/KME0jj0wA6c:pOzRWu27dlOd5W0In
Behavioral task
behavioral1
Sample
81faf47e279217ddb4f9ef8f147697c7fb80a1f36464b801c774d34dcb99a11dN.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
81faf47e279217ddb4f9ef8f147697c7fb80a1f36464b801c774d34dcb99a11dN.exe
-
Size
274KB
-
MD5
a153677f0478feae8acc9e7d88da37b0
-
SHA1
491ec8d033805fb58a0879d27521670386ec48fe
-
SHA256
81faf47e279217ddb4f9ef8f147697c7fb80a1f36464b801c774d34dcb99a11d
-
SHA512
a216626d8a7498bcc247aa20647382202c4cf851bb1dc54b19138636006b1762a318e581b46997bb020c21d2f244a10e98ded600ba68598979fa2980f3f22b7b
-
SSDEEP
3072:pp56zRJ83+OJ7NoGvdwWy6k04yW/KME0jj0wA6c:pOzRWu27dlOd5W0In
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-