General
-
Target
67bad1b645cca94a24371b4ec215cc9b7efbf1fbacb15a2fb55e7cf3a700eb7d.exe
-
Size
241KB
-
Sample
241124-dpfx6a1mft
-
MD5
4fd4bb6010719e935c05f5563902cbc4
-
SHA1
8245d6a0739b829f9bdee94e8e28d511d7419b0b
-
SHA256
67bad1b645cca94a24371b4ec215cc9b7efbf1fbacb15a2fb55e7cf3a700eb7d
-
SHA512
6562e8905e78c0ad959716b2699d1c00efd109f55c1567d57a4dfe89d00a09dcab4340903419a4ce2e398835e2927672fcd5f233c48494409439f459ea9d98a9
-
SSDEEP
3072:K8ASpvo0LKrXEX65ezpxJ2kbJ7mv73E2o/9sY2n:ZASpvo0LKkRzpxJ2kRqroin
Behavioral task
behavioral1
Sample
67bad1b645cca94a24371b4ec215cc9b7efbf1fbacb15a2fb55e7cf3a700eb7d.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
112.175.88.207
112.175.88.208
Targets
-
-
Target
67bad1b645cca94a24371b4ec215cc9b7efbf1fbacb15a2fb55e7cf3a700eb7d.exe
-
Size
241KB
-
MD5
4fd4bb6010719e935c05f5563902cbc4
-
SHA1
8245d6a0739b829f9bdee94e8e28d511d7419b0b
-
SHA256
67bad1b645cca94a24371b4ec215cc9b7efbf1fbacb15a2fb55e7cf3a700eb7d
-
SHA512
6562e8905e78c0ad959716b2699d1c00efd109f55c1567d57a4dfe89d00a09dcab4340903419a4ce2e398835e2927672fcd5f233c48494409439f459ea9d98a9
-
SSDEEP
3072:K8ASpvo0LKrXEX65ezpxJ2kbJ7mv73E2o/9sY2n:ZASpvo0LKkRzpxJ2kRqroin
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-