General
-
Target
f2b8bc38e00041653286540956d5ca8d8532fbc1617ef38d7fe6bed514d054ec.exe
-
Size
441KB
-
Sample
241123-n3nj9s1jcn
-
MD5
9e0b301908800e45d47a15d9eebb6fad
-
SHA1
7b8785b18bd3f5a04488b1c5c4b4a9f7b9593152
-
SHA256
f2b8bc38e00041653286540956d5ca8d8532fbc1617ef38d7fe6bed514d054ec
-
SHA512
df5fda3ef654d1587f76d008390cdc0b579bedb61738a8d48c8fee801efab6a8c8d32dc66298a29d1dfcc9b737ae5cb96030a6677c1656f80e55304f2a52fd2d
-
SSDEEP
6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpjH:oMpASIcWYx2U6hAJQnQ
Behavioral task
behavioral1
Sample
f2b8bc38e00041653286540956d5ca8d8532fbc1617ef38d7fe6bed514d054ec.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
f2b8bc38e00041653286540956d5ca8d8532fbc1617ef38d7fe6bed514d054ec.exe
-
Size
441KB
-
MD5
9e0b301908800e45d47a15d9eebb6fad
-
SHA1
7b8785b18bd3f5a04488b1c5c4b4a9f7b9593152
-
SHA256
f2b8bc38e00041653286540956d5ca8d8532fbc1617ef38d7fe6bed514d054ec
-
SHA512
df5fda3ef654d1587f76d008390cdc0b579bedb61738a8d48c8fee801efab6a8c8d32dc66298a29d1dfcc9b737ae5cb96030a6677c1656f80e55304f2a52fd2d
-
SSDEEP
6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpjH:oMpASIcWYx2U6hAJQnQ
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-