General
-
Target
558367d11736d5ed87bc4038db2ec9a67cb0c79da07a269e043f2fb7063189c4.exe
-
Size
441KB
-
Sample
241123-n82zvavjbx
-
MD5
843997ebd749579ffd00b2a9fe6284de
-
SHA1
a7443e907bf47fb2b4b16f84ae9235ae90d73ff7
-
SHA256
558367d11736d5ed87bc4038db2ec9a67cb0c79da07a269e043f2fb7063189c4
-
SHA512
437db5146230455e04798bb2e2c87ed8313880d03450e766450b4508beb12aee63d290d67e0f3d65e8fd9ee04618fbe1a1b1cbff91011891d388a5777ab2e093
-
SSDEEP
6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpjg:oMpASIcWYx2U6hAJQnn
Behavioral task
behavioral1
Sample
558367d11736d5ed87bc4038db2ec9a67cb0c79da07a269e043f2fb7063189c4.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
558367d11736d5ed87bc4038db2ec9a67cb0c79da07a269e043f2fb7063189c4.exe
-
Size
441KB
-
MD5
843997ebd749579ffd00b2a9fe6284de
-
SHA1
a7443e907bf47fb2b4b16f84ae9235ae90d73ff7
-
SHA256
558367d11736d5ed87bc4038db2ec9a67cb0c79da07a269e043f2fb7063189c4
-
SHA512
437db5146230455e04798bb2e2c87ed8313880d03450e766450b4508beb12aee63d290d67e0f3d65e8fd9ee04618fbe1a1b1cbff91011891d388a5777ab2e093
-
SSDEEP
6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpjg:oMpASIcWYx2U6hAJQnn
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-