General
-
Target
716a1ae7074f71915ea6c547cc890fa82838d24b11fc7e1778a78298d00b272c
-
Size
508KB
-
Sample
241122-3yvkcaylgj
-
MD5
9c5fb0c62ec811e3ee09c3c038c3f4a2
-
SHA1
965460b96e0039bab84553fc48a86dcc9530a827
-
SHA256
716a1ae7074f71915ea6c547cc890fa82838d24b11fc7e1778a78298d00b272c
-
SHA512
f367dc4f03ea54a0d5ff87ddade90a6c8b0e6e07c73d7c775c67221869a40a823e3edb3d66ecfdb7f4f4ceec3c96a310304ef07b03c53b72a4f1fd05822aa55d
-
SSDEEP
12288:3o7CGWcQSyYI2VrFKH5RBv9AQ1pEDdKoo:3MUv2LAv9AQ1p4dKJ
Behavioral task
behavioral1
Sample
716a1ae7074f71915ea6c547cc890fa82838d24b11fc7e1778a78298d00b272c.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
716a1ae7074f71915ea6c547cc890fa82838d24b11fc7e1778a78298d00b272c
-
Size
508KB
-
MD5
9c5fb0c62ec811e3ee09c3c038c3f4a2
-
SHA1
965460b96e0039bab84553fc48a86dcc9530a827
-
SHA256
716a1ae7074f71915ea6c547cc890fa82838d24b11fc7e1778a78298d00b272c
-
SHA512
f367dc4f03ea54a0d5ff87ddade90a6c8b0e6e07c73d7c775c67221869a40a823e3edb3d66ecfdb7f4f4ceec3c96a310304ef07b03c53b72a4f1fd05822aa55d
-
SSDEEP
12288:3o7CGWcQSyYI2VrFKH5RBv9AQ1pEDdKoo:3MUv2LAv9AQ1p4dKJ
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-