General
-
Target
c1964d400b55481e956d77346f7ad040e09b272bad96127365fb3e7281d3767c.exe
-
Size
597KB
-
Sample
241122-shqlcayqaq
-
MD5
8fd85ee4b09ceab66733ac13dbf09e1d
-
SHA1
0bf74e1ba4927b718ae922b89f149fb75236efd0
-
SHA256
c1964d400b55481e956d77346f7ad040e09b272bad96127365fb3e7281d3767c
-
SHA512
3ba8695775b981fe2ad4a8ee025dea547d58789213849b2b681448452b2921fe43876dfa7a2aece26aaee3aed10366761c159c1b829ffb5022c997d0fe4dc3bc
-
SSDEEP
6144:KzU7blKaPcbhj+bB7ktZeRnVDJm0oNjOPdInpB8:MU7MLb4BQkntwNjqdx
Behavioral task
behavioral1
Sample
c1964d400b55481e956d77346f7ad040e09b272bad96127365fb3e7281d3767c.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
Targets
-
-
Target
c1964d400b55481e956d77346f7ad040e09b272bad96127365fb3e7281d3767c.exe
-
Size
597KB
-
MD5
8fd85ee4b09ceab66733ac13dbf09e1d
-
SHA1
0bf74e1ba4927b718ae922b89f149fb75236efd0
-
SHA256
c1964d400b55481e956d77346f7ad040e09b272bad96127365fb3e7281d3767c
-
SHA512
3ba8695775b981fe2ad4a8ee025dea547d58789213849b2b681448452b2921fe43876dfa7a2aece26aaee3aed10366761c159c1b829ffb5022c997d0fe4dc3bc
-
SSDEEP
6144:KzU7blKaPcbhj+bB7ktZeRnVDJm0oNjOPdInpB8:MU7MLb4BQkntwNjqdx
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-