General
-
Target
c7fabd61f40cadc250b326cecc46cd525fcd851705c7169d80fd29e5e35b3f46.exe
-
Size
690KB
-
Sample
241123-afas1aynbl
-
MD5
f8781a2b82f220ca4ddbc4aa5c09902a
-
SHA1
817dc3e1e91c13a244feafbd7cfe97020d170ab6
-
SHA256
c7fabd61f40cadc250b326cecc46cd525fcd851705c7169d80fd29e5e35b3f46
-
SHA512
046b33a6024b265eafee8ea1997acf07467904e5f2422e5e662e8def4ea896ba1928b82e96fc391fd2c1ef8eddbff2efa0fb786fc608d2a308959182db59e12a
-
SSDEEP
12288:LUyI6hJQglQA0IWb8DmPySxEuBZDxywHBlP94jpguwDxXlZ1nA:dVh6gl6Iy8R9+ZdnnP94jpgl9BnA
Behavioral task
behavioral1
Sample
c7fabd61f40cadc250b326cecc46cd525fcd851705c7169d80fd29e5e35b3f46.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
Targets
-
-
Target
c7fabd61f40cadc250b326cecc46cd525fcd851705c7169d80fd29e5e35b3f46.exe
-
Size
690KB
-
MD5
f8781a2b82f220ca4ddbc4aa5c09902a
-
SHA1
817dc3e1e91c13a244feafbd7cfe97020d170ab6
-
SHA256
c7fabd61f40cadc250b326cecc46cd525fcd851705c7169d80fd29e5e35b3f46
-
SHA512
046b33a6024b265eafee8ea1997acf07467904e5f2422e5e662e8def4ea896ba1928b82e96fc391fd2c1ef8eddbff2efa0fb786fc608d2a308959182db59e12a
-
SSDEEP
12288:LUyI6hJQglQA0IWb8DmPySxEuBZDxywHBlP94jpguwDxXlZ1nA:dVh6gl6Iy8R9+ZdnnP94jpgl9BnA
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-