General
-
Target
51add40369fbcc338e5fde1bee160ebb1b5f7d1f7c4012397f676a14e2ad2b35.exe
-
Size
60KB
-
Sample
241123-nh6kcazpck
-
MD5
9137e251cd1d8cfcab6c26096ef4076f
-
SHA1
362d43f85a08fe1083bd3d46dc4883d4524f38b9
-
SHA256
51add40369fbcc338e5fde1bee160ebb1b5f7d1f7c4012397f676a14e2ad2b35
-
SHA512
66ed672c8664e182eee285e88611385ab63447b06cc8ebb66942ab443464ce2aedaf84afaab715a0b3eb7e86af5781dff6638c2dc7fb251e369bf1088e9812e4
-
SSDEEP
768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPz:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdrU
Static task
static1
Behavioral task
behavioral1
Sample
51add40369fbcc338e5fde1bee160ebb1b5f7d1f7c4012397f676a14e2ad2b35.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
51add40369fbcc338e5fde1bee160ebb1b5f7d1f7c4012397f676a14e2ad2b35.exe
-
Size
60KB
-
MD5
9137e251cd1d8cfcab6c26096ef4076f
-
SHA1
362d43f85a08fe1083bd3d46dc4883d4524f38b9
-
SHA256
51add40369fbcc338e5fde1bee160ebb1b5f7d1f7c4012397f676a14e2ad2b35
-
SHA512
66ed672c8664e182eee285e88611385ab63447b06cc8ebb66942ab443464ce2aedaf84afaab715a0b3eb7e86af5781dff6638c2dc7fb251e369bf1088e9812e4
-
SSDEEP
768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPz:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdrU
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-