General
-
Target
5a5cefab37f78e90efdd6d0ce940bfec022f64a6702b856a704a6500d5e4756d.exe
-
Size
784KB
-
Sample
241123-wds3fsvqdk
-
MD5
bbec813948c72f96a34ad5b3b10fd118
-
SHA1
03db2340afe0ae7d2d216edfc880ed36bfd6da9d
-
SHA256
5a5cefab37f78e90efdd6d0ce940bfec022f64a6702b856a704a6500d5e4756d
-
SHA512
0c10dc61b10143e201660e20ac0fa4e4edb2ac1ffa7862d3e3572f923886e31669583498ee54ead67453724134ded9e6b4da1331a4b353e1c53215b40ffc4239
-
SSDEEP
12288:d7dL4AkwWNk82HAEGfKKBhVGT5OY8pgA65t8mv5pThkJ8HxW0d8GYEgn:d7dLBftJLW5YUWLrkJB0PJgn
Behavioral task
behavioral1
Sample
5a5cefab37f78e90efdd6d0ce940bfec022f64a6702b856a704a6500d5e4756d.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
5a5cefab37f78e90efdd6d0ce940bfec022f64a6702b856a704a6500d5e4756d.exe
-
Size
784KB
-
MD5
bbec813948c72f96a34ad5b3b10fd118
-
SHA1
03db2340afe0ae7d2d216edfc880ed36bfd6da9d
-
SHA256
5a5cefab37f78e90efdd6d0ce940bfec022f64a6702b856a704a6500d5e4756d
-
SHA512
0c10dc61b10143e201660e20ac0fa4e4edb2ac1ffa7862d3e3572f923886e31669583498ee54ead67453724134ded9e6b4da1331a4b353e1c53215b40ffc4239
-
SSDEEP
12288:d7dL4AkwWNk82HAEGfKKBhVGT5OY8pgA65t8mv5pThkJ8HxW0d8GYEgn:d7dLBftJLW5YUWLrkJB0PJgn
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-