General
-
Target
1c090372856b7b3074df1c2259707d1d3a23a08f02c1ce30ed79ccbb1975d7e3.exe
-
Size
450KB
-
Sample
241122-kkhphsxnfz
-
MD5
536da247a62bf70f370825f5cdf58b99
-
SHA1
a5a3655d28c08d38c72b8ad71859b14f1661ffc9
-
SHA256
1c090372856b7b3074df1c2259707d1d3a23a08f02c1ce30ed79ccbb1975d7e3
-
SHA512
0d675bde335e7ea5765ef011ed5c428424a7b0720a3a71c403305cd0aada8a8f58bdaf277a976d9eeecd86f2e773aec81b6802e2eeaefbc4052722540187374a
-
SSDEEP
6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFTA:CMpASIcWYx2U6hAJQnx
Behavioral task
behavioral1
Sample
1c090372856b7b3074df1c2259707d1d3a23a08f02c1ce30ed79ccbb1975d7e3.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
1c090372856b7b3074df1c2259707d1d3a23a08f02c1ce30ed79ccbb1975d7e3.exe
-
Size
450KB
-
MD5
536da247a62bf70f370825f5cdf58b99
-
SHA1
a5a3655d28c08d38c72b8ad71859b14f1661ffc9
-
SHA256
1c090372856b7b3074df1c2259707d1d3a23a08f02c1ce30ed79ccbb1975d7e3
-
SHA512
0d675bde335e7ea5765ef011ed5c428424a7b0720a3a71c403305cd0aada8a8f58bdaf277a976d9eeecd86f2e773aec81b6802e2eeaefbc4052722540187374a
-
SSDEEP
6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFTA:CMpASIcWYx2U6hAJQnx
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-