General
-
Target
a8f465852b204bf3b159c4624ca9accf4fb90b01ccb8b9775e35c0c4c8757be5.exe
-
Size
140KB
-
Sample
241122-yg19catkbr
-
MD5
911fcedac2288feb9b40d3d554a35c48
-
SHA1
20049de78dbb85134a24ebcf63b4cbd340712339
-
SHA256
a8f465852b204bf3b159c4624ca9accf4fb90b01ccb8b9775e35c0c4c8757be5
-
SHA512
065d6f220bce7aa4e91e74cea0baf85bf50da71bdc4f6c0f08725aefacdbeb20e465c15ea13431c7a2b3b4ca36a98c7137e906ad3fd3e8d94b04dd822cf1c8a7
-
SSDEEP
1536:P/oEkqfCZ10zcT9Yh8AIXcjyz9cOXfiXGImcatMrsWjcdf6odgR5APfI9:P/5kqCxiXEcO3XfGf2tMUf6odgR5A49
Behavioral task
behavioral1
Sample
a8f465852b204bf3b159c4624ca9accf4fb90b01ccb8b9775e35c0c4c8757be5.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
a8f465852b204bf3b159c4624ca9accf4fb90b01ccb8b9775e35c0c4c8757be5.exe
-
Size
140KB
-
MD5
911fcedac2288feb9b40d3d554a35c48
-
SHA1
20049de78dbb85134a24ebcf63b4cbd340712339
-
SHA256
a8f465852b204bf3b159c4624ca9accf4fb90b01ccb8b9775e35c0c4c8757be5
-
SHA512
065d6f220bce7aa4e91e74cea0baf85bf50da71bdc4f6c0f08725aefacdbeb20e465c15ea13431c7a2b3b4ca36a98c7137e906ad3fd3e8d94b04dd822cf1c8a7
-
SSDEEP
1536:P/oEkqfCZ10zcT9Yh8AIXcjyz9cOXfiXGImcatMrsWjcdf6odgR5APfI9:P/5kqCxiXEcO3XfGf2tMUf6odgR5A49
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-