General
-
Target
0eb781de51bf989edd869692c26b6ab17863ff3c93aa733cb0d6637c81ae02c6.exe
-
Size
507KB
-
Sample
241122-hrfgmawlbz
-
MD5
08be228d25d342d7d76e3bb621843201
-
SHA1
717d3fd3706ba34fe32f8e1fb356148b065d37bb
-
SHA256
0eb781de51bf989edd869692c26b6ab17863ff3c93aa733cb0d6637c81ae02c6
-
SHA512
8f8d3ee48233f3a5c1f5ac6fb2d788e5968767b5a5f9cf01a78283c32e8f9197fb8531f6f615bb9e104c4d008b14874160f1a0f8e5786086eaf8c8c58bb3ebff
-
SSDEEP
12288:kdBNKTCqqwXCcdgT89+MvA+BisqYpxHte:kLjQC+fs0M
Behavioral task
behavioral1
Sample
0eb781de51bf989edd869692c26b6ab17863ff3c93aa733cb0d6637c81ae02c6.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.226
218.54.31.165
Targets
-
-
Target
0eb781de51bf989edd869692c26b6ab17863ff3c93aa733cb0d6637c81ae02c6.exe
-
Size
507KB
-
MD5
08be228d25d342d7d76e3bb621843201
-
SHA1
717d3fd3706ba34fe32f8e1fb356148b065d37bb
-
SHA256
0eb781de51bf989edd869692c26b6ab17863ff3c93aa733cb0d6637c81ae02c6
-
SHA512
8f8d3ee48233f3a5c1f5ac6fb2d788e5968767b5a5f9cf01a78283c32e8f9197fb8531f6f615bb9e104c4d008b14874160f1a0f8e5786086eaf8c8c58bb3ebff
-
SSDEEP
12288:kdBNKTCqqwXCcdgT89+MvA+BisqYpxHte:kLjQC+fs0M
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-