General
-
Target
d028bd4a520514fc50953f54f9a49a24b41370dd56deafc3981321548204cbec
-
Size
326KB
-
Sample
241124-d3rxksyjbp
-
MD5
04789a3f25b4f7543879d1a38938613e
-
SHA1
00b2cc1c3643cf1c6fcfaa87152fb1205635f740
-
SHA256
d028bd4a520514fc50953f54f9a49a24b41370dd56deafc3981321548204cbec
-
SHA512
4cc6d593494cb9670763942b337a254c5aa7be4c078efbabdb12f6fabc8c95de8f4c11703811d4428c7a40e75b783ed6a82fb2fcc284aab116c03c28dd8c642d
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYa:vHW138/iXWlK885rKlGSekcj66cin
Static task
static1
Behavioral task
behavioral1
Sample
d028bd4a520514fc50953f54f9a49a24b41370dd56deafc3981321548204cbec.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
d028bd4a520514fc50953f54f9a49a24b41370dd56deafc3981321548204cbec
-
Size
326KB
-
MD5
04789a3f25b4f7543879d1a38938613e
-
SHA1
00b2cc1c3643cf1c6fcfaa87152fb1205635f740
-
SHA256
d028bd4a520514fc50953f54f9a49a24b41370dd56deafc3981321548204cbec
-
SHA512
4cc6d593494cb9670763942b337a254c5aa7be4c078efbabdb12f6fabc8c95de8f4c11703811d4428c7a40e75b783ed6a82fb2fcc284aab116c03c28dd8c642d
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYa:vHW138/iXWlK885rKlGSekcj66cin
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-