General
-
Target
03fa6261e2ee4f47376aec0875cadf16e774b02382f48e9f1f2cfd32352d0484.exe
-
Size
4.7MB
-
Sample
241124-b6h3qsxpbv
-
MD5
b6a55c30a06c0e8bb0da2b66025873c4
-
SHA1
fe402ca6591834996728a7690c3a15b23333d8a9
-
SHA256
03fa6261e2ee4f47376aec0875cadf16e774b02382f48e9f1f2cfd32352d0484
-
SHA512
aabfe35696ae6c4ddbd6e5255ed3adb0c6d58825c4490679e779ab117a1e336bbb31576a215d1954a39672b585230d9adc310f05587450cf5cf94060ba602925
-
SSDEEP
49152:a2V7djp+oE2ZjHoZB6EZ88JUUXIEABMRviTURcz:a2V7NpW6Y6joU3
Behavioral task
behavioral1
Sample
03fa6261e2ee4f47376aec0875cadf16e774b02382f48e9f1f2cfd32352d0484.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
121.88.5.183
218.54.30.235
121.88.5.181
112.223.217.101
Targets
-
-
Target
03fa6261e2ee4f47376aec0875cadf16e774b02382f48e9f1f2cfd32352d0484.exe
-
Size
4.7MB
-
MD5
b6a55c30a06c0e8bb0da2b66025873c4
-
SHA1
fe402ca6591834996728a7690c3a15b23333d8a9
-
SHA256
03fa6261e2ee4f47376aec0875cadf16e774b02382f48e9f1f2cfd32352d0484
-
SHA512
aabfe35696ae6c4ddbd6e5255ed3adb0c6d58825c4490679e779ab117a1e336bbb31576a215d1954a39672b585230d9adc310f05587450cf5cf94060ba602925
-
SSDEEP
49152:a2V7djp+oE2ZjHoZB6EZ88JUUXIEABMRviTURcz:a2V7NpW6Y6joU3
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-