General
-
Target
02c3bd1e83a2c0666dd35677cb14109cea5409ea97122b5f0293465da1d19ed4.exe
-
Size
330KB
-
Sample
241123-h89f2axmar
-
MD5
36e5c622f7d4af17d71b4d99058b6373
-
SHA1
2e318f351e52d0f7fecee5f3138269c7362a072b
-
SHA256
02c3bd1e83a2c0666dd35677cb14109cea5409ea97122b5f0293465da1d19ed4
-
SHA512
fb0df7368ce2a02b8e27eb32134123bd0d123d500e85630046ada3ea7a34ca9cb91ee116d54fd7501ec1acd18a1c23d72b4b8ecea47929c82ce9e47a7e3abdaa
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYMOwP:vHW138/iXWlK885rKlGSekcj66ciXP
Static task
static1
Behavioral task
behavioral1
Sample
02c3bd1e83a2c0666dd35677cb14109cea5409ea97122b5f0293465da1d19ed4.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
02c3bd1e83a2c0666dd35677cb14109cea5409ea97122b5f0293465da1d19ed4.exe
-
Size
330KB
-
MD5
36e5c622f7d4af17d71b4d99058b6373
-
SHA1
2e318f351e52d0f7fecee5f3138269c7362a072b
-
SHA256
02c3bd1e83a2c0666dd35677cb14109cea5409ea97122b5f0293465da1d19ed4
-
SHA512
fb0df7368ce2a02b8e27eb32134123bd0d123d500e85630046ada3ea7a34ca9cb91ee116d54fd7501ec1acd18a1c23d72b4b8ecea47929c82ce9e47a7e3abdaa
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYMOwP:vHW138/iXWlK885rKlGSekcj66ciXP
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-