General
-
Target
d9374c75d33b6b44e45a576fa01a39bc26cf3aaf71ae39781cab1f437a41f103.exe
-
Size
60KB
-
Sample
241123-y8c1tsvld1
-
MD5
3d1d7d767216e01ece5829add86d3f8e
-
SHA1
d77516e5a07292e8657b1fe400e798e860828b5c
-
SHA256
d9374c75d33b6b44e45a576fa01a39bc26cf3aaf71ae39781cab1f437a41f103
-
SHA512
e0cd8a1a19963ff70001e450d99f8bfff3f3477a5a032ad9b33e3e0c71d62a0d6248e21d32c396c102a2cc99981d2588a2059df3a6973db05c02d15c6ab2fe6f
-
SSDEEP
768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPh:nK0GjMeQG3iaQREuVZ6ro29p4YxbKd98
Static task
static1
Behavioral task
behavioral1
Sample
d9374c75d33b6b44e45a576fa01a39bc26cf3aaf71ae39781cab1f437a41f103.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
d9374c75d33b6b44e45a576fa01a39bc26cf3aaf71ae39781cab1f437a41f103.exe
-
Size
60KB
-
MD5
3d1d7d767216e01ece5829add86d3f8e
-
SHA1
d77516e5a07292e8657b1fe400e798e860828b5c
-
SHA256
d9374c75d33b6b44e45a576fa01a39bc26cf3aaf71ae39781cab1f437a41f103
-
SHA512
e0cd8a1a19963ff70001e450d99f8bfff3f3477a5a032ad9b33e3e0c71d62a0d6248e21d32c396c102a2cc99981d2588a2059df3a6973db05c02d15c6ab2fe6f
-
SSDEEP
768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPh:nK0GjMeQG3iaQREuVZ6ro29p4YxbKd98
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-