General
-
Target
9513013f069dd2dd48324e6620ae14df540b7af34a56bc36b441423451b05af4.exe
-
Size
348KB
-
Sample
241123-y4wblsvjgx
-
MD5
a89691f3add0a3fa328f60dacbb8e2aa
-
SHA1
a3fcdd5e991e835f7956c6ef5b30bb9c7f59b8a1
-
SHA256
9513013f069dd2dd48324e6620ae14df540b7af34a56bc36b441423451b05af4
-
SHA512
409ad5f9e81d11f26b543611e327b1575589568bd6cebe568b3ff379f1361221a1e4a3925ecbe1ea51628d06d702309e6aa6c2182eb2100b340a8a1ef6e5e8fd
-
SSDEEP
6144:8/bE5G5KiR0J0dCsnGb/6VOpLc91WlvhDSNZ5c:g0G5obGGraOpUWlpZ
Behavioral task
behavioral1
Sample
9513013f069dd2dd48324e6620ae14df540b7af34a56bc36b441423451b05af4.exe
Resource
win7-20240708-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
Targets
-
-
Target
9513013f069dd2dd48324e6620ae14df540b7af34a56bc36b441423451b05af4.exe
-
Size
348KB
-
MD5
a89691f3add0a3fa328f60dacbb8e2aa
-
SHA1
a3fcdd5e991e835f7956c6ef5b30bb9c7f59b8a1
-
SHA256
9513013f069dd2dd48324e6620ae14df540b7af34a56bc36b441423451b05af4
-
SHA512
409ad5f9e81d11f26b543611e327b1575589568bd6cebe568b3ff379f1361221a1e4a3925ecbe1ea51628d06d702309e6aa6c2182eb2100b340a8a1ef6e5e8fd
-
SSDEEP
6144:8/bE5G5KiR0J0dCsnGb/6VOpLc91WlvhDSNZ5c:g0G5obGGraOpUWlpZ
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-