General
-
Target
23d278aaf68acace9108d15d3ae47628810d544d4fdd7a3e6808efd927e37a1d.exe
-
Size
404KB
-
Sample
241122-lhpwgstram
-
MD5
984678a2778ad4da6b797e68b64f1571
-
SHA1
572ab643708abc1ccdcc76f07d7ccae243015fb3
-
SHA256
23d278aaf68acace9108d15d3ae47628810d544d4fdd7a3e6808efd927e37a1d
-
SHA512
f287f6b79f176884745cd1e3f28fb2d8284d9bf7b05ecfdd212e00def7fbd4baa6de51c654496d01b2d742c2acc3ad922842581c51d2fdb2f92d397be40346db
-
SSDEEP
6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohQ:8IfBoDWoyFblU6hAJQnOS
Behavioral task
behavioral1
Sample
23d278aaf68acace9108d15d3ae47628810d544d4fdd7a3e6808efd927e37a1d.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
23d278aaf68acace9108d15d3ae47628810d544d4fdd7a3e6808efd927e37a1d.exe
-
Size
404KB
-
MD5
984678a2778ad4da6b797e68b64f1571
-
SHA1
572ab643708abc1ccdcc76f07d7ccae243015fb3
-
SHA256
23d278aaf68acace9108d15d3ae47628810d544d4fdd7a3e6808efd927e37a1d
-
SHA512
f287f6b79f176884745cd1e3f28fb2d8284d9bf7b05ecfdd212e00def7fbd4baa6de51c654496d01b2d742c2acc3ad922842581c51d2fdb2f92d397be40346db
-
SSDEEP
6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohQ:8IfBoDWoyFblU6hAJQnOS
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-