General
-
Target
a4308254b8768c0b8e4811a8dcf3caef6e21d3c3ae44643757f934ab0b7cf05b.exe
-
Size
188KB
-
Sample
241122-qvlf2s1pg1
-
MD5
0344165587d1b79516dbe3519d5c387c
-
SHA1
f74bb0d511fa1dda7d2ff917599e9721b46d3f78
-
SHA256
a4308254b8768c0b8e4811a8dcf3caef6e21d3c3ae44643757f934ab0b7cf05b
-
SHA512
f95f0543522e2c912b1cc130623cee1bc10778669dbabb1523661fbe155cb1dff946274240112fd5a51e55c280a7c54688edfb5457fdbd7aa7cbc28a68961e68
-
SSDEEP
1536:TPwN8ukP5sZK20EGIBpwW6NeleEQ77nuUWXJmU2Ajpf8oI4KEAUgJM:Thuk8QsH47nW5ppkoI4KEAUgJM
Behavioral task
behavioral1
Sample
a4308254b8768c0b8e4811a8dcf3caef6e21d3c3ae44643757f934ab0b7cf05b.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
112.175.88.207
112.175.88.208
Targets
-
-
Target
a4308254b8768c0b8e4811a8dcf3caef6e21d3c3ae44643757f934ab0b7cf05b.exe
-
Size
188KB
-
MD5
0344165587d1b79516dbe3519d5c387c
-
SHA1
f74bb0d511fa1dda7d2ff917599e9721b46d3f78
-
SHA256
a4308254b8768c0b8e4811a8dcf3caef6e21d3c3ae44643757f934ab0b7cf05b
-
SHA512
f95f0543522e2c912b1cc130623cee1bc10778669dbabb1523661fbe155cb1dff946274240112fd5a51e55c280a7c54688edfb5457fdbd7aa7cbc28a68961e68
-
SSDEEP
1536:TPwN8ukP5sZK20EGIBpwW6NeleEQ77nuUWXJmU2Ajpf8oI4KEAUgJM:Thuk8QsH47nW5ppkoI4KEAUgJM
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-