General
-
Target
db459d00de42aa44b6737fea02731640e48c5b405baf9c9df4865af69c0939ad.exe
-
Size
454KB
-
Sample
241123-y8kqns1nan
-
MD5
d6860d113a4a3b7003723e279716d096
-
SHA1
bf76074e27517e5bddbbb391966fcb7071ae3a31
-
SHA256
db459d00de42aa44b6737fea02731640e48c5b405baf9c9df4865af69c0939ad
-
SHA512
12534ba3a0a89b1eb472f3f9796eada1e5f96f78715992ac52720ee8dbe084e1a04220f8bbf64fdfebaf1f2117559abdc79623d8b69214b279106c8acbbc2b47
-
SSDEEP
12288:AyPHijVSuJqu4kwaeDPvjJ81VGqK6GvPH:AuCTq4waor+Gn/
Behavioral task
behavioral1
Sample
db459d00de42aa44b6737fea02731640e48c5b405baf9c9df4865af69c0939ad.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.226
218.54.31.165
Targets
-
-
Target
db459d00de42aa44b6737fea02731640e48c5b405baf9c9df4865af69c0939ad.exe
-
Size
454KB
-
MD5
d6860d113a4a3b7003723e279716d096
-
SHA1
bf76074e27517e5bddbbb391966fcb7071ae3a31
-
SHA256
db459d00de42aa44b6737fea02731640e48c5b405baf9c9df4865af69c0939ad
-
SHA512
12534ba3a0a89b1eb472f3f9796eada1e5f96f78715992ac52720ee8dbe084e1a04220f8bbf64fdfebaf1f2117559abdc79623d8b69214b279106c8acbbc2b47
-
SSDEEP
12288:AyPHijVSuJqu4kwaeDPvjJ81VGqK6GvPH:AuCTq4waor+Gn/
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-