General
-
Target
3446560be933db07885e01658cad196df816cde7c8537097de5bb36fdf583d38.exe
-
Size
441KB
-
Sample
241124-ef6b5aspgz
-
MD5
f86dcb4311922e5e86616c5304ba2d19
-
SHA1
90a2443c818be2c5d347b74e41eda53011386b45
-
SHA256
3446560be933db07885e01658cad196df816cde7c8537097de5bb36fdf583d38
-
SHA512
874524ea9560d72754092debb60c1962d717f4ca2a986713a40f32e6d99448e19200de54b32bad4034e4522c9ed4ed7cb52f13ae33eb4d186be1fcfa721165c3
-
SSDEEP
6144:oo3wBi+1Py3V0a2WkRNgi3caOHO5NjEwwiYWB5mV4Pzw9ygibGGM/:rKf1PyKa2H3hOHOHz9JQ6zBO
Behavioral task
behavioral1
Sample
3446560be933db07885e01658cad196df816cde7c8537097de5bb36fdf583d38.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.165
218.54.31.226
Targets
-
-
Target
3446560be933db07885e01658cad196df816cde7c8537097de5bb36fdf583d38.exe
-
Size
441KB
-
MD5
f86dcb4311922e5e86616c5304ba2d19
-
SHA1
90a2443c818be2c5d347b74e41eda53011386b45
-
SHA256
3446560be933db07885e01658cad196df816cde7c8537097de5bb36fdf583d38
-
SHA512
874524ea9560d72754092debb60c1962d717f4ca2a986713a40f32e6d99448e19200de54b32bad4034e4522c9ed4ed7cb52f13ae33eb4d186be1fcfa721165c3
-
SSDEEP
6144:oo3wBi+1Py3V0a2WkRNgi3caOHO5NjEwwiYWB5mV4Pzw9ygibGGM/:rKf1PyKa2H3hOHOHz9JQ6zBO
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-