General
-
Target
cb929e02857192e8bd260cb769d09c6f38fbfb33040763b5c0350f8e939b6a91.exe
-
Size
60KB
-
Sample
241122-lvt1zaylby
-
MD5
5d414a4fdf6d1283314be0eefd85c083
-
SHA1
41fbc9e88a3705d7593ea323d362f4c14b802102
-
SHA256
cb929e02857192e8bd260cb769d09c6f38fbfb33040763b5c0350f8e939b6a91
-
SHA512
f5b12833533920dcc952b07965bb21017a07aa38ac974c39b564ca8d8c6c4f63983ab93657bf5da4a664bd78532e99c8d5fd9eb2d93c2e1c9f9a27e03cb9dc60
-
SSDEEP
768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPX:nK0GjMeQG3iaQREuVZ6ro29p4YxbKd5I
Static task
static1
Behavioral task
behavioral1
Sample
cb929e02857192e8bd260cb769d09c6f38fbfb33040763b5c0350f8e939b6a91.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
cb929e02857192e8bd260cb769d09c6f38fbfb33040763b5c0350f8e939b6a91.exe
-
Size
60KB
-
MD5
5d414a4fdf6d1283314be0eefd85c083
-
SHA1
41fbc9e88a3705d7593ea323d362f4c14b802102
-
SHA256
cb929e02857192e8bd260cb769d09c6f38fbfb33040763b5c0350f8e939b6a91
-
SHA512
f5b12833533920dcc952b07965bb21017a07aa38ac974c39b564ca8d8c6c4f63983ab93657bf5da4a664bd78532e99c8d5fd9eb2d93c2e1c9f9a27e03cb9dc60
-
SSDEEP
768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPX:nK0GjMeQG3iaQREuVZ6ro29p4YxbKd5I
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-