General
-
Target
707a539c64d23c9cf836e8c92742b5d4f32895c906cad28966e78d1ed011f25c.exe
-
Size
448KB
-
Sample
241124-gf77tssqcq
-
MD5
7b19391fe95e7ca39f825f9a97524f99
-
SHA1
c2a97e3c170d4860dbe274f387382e566763652b
-
SHA256
707a539c64d23c9cf836e8c92742b5d4f32895c906cad28966e78d1ed011f25c
-
SHA512
1f812cf3f6740ff8b2bc04553c55749c0ac2a0ff61cccca4d48cc995abeac64286d945386c10fe82bea2745898ac9c1ce3581841ff016eb19a117c0d2d2c3856
-
SSDEEP
6144:PEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpoZ8:PMpASIcWYx2U6hAJQn6
Behavioral task
behavioral1
Sample
707a539c64d23c9cf836e8c92742b5d4f32895c906cad28966e78d1ed011f25c.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
707a539c64d23c9cf836e8c92742b5d4f32895c906cad28966e78d1ed011f25c.exe
-
Size
448KB
-
MD5
7b19391fe95e7ca39f825f9a97524f99
-
SHA1
c2a97e3c170d4860dbe274f387382e566763652b
-
SHA256
707a539c64d23c9cf836e8c92742b5d4f32895c906cad28966e78d1ed011f25c
-
SHA512
1f812cf3f6740ff8b2bc04553c55749c0ac2a0ff61cccca4d48cc995abeac64286d945386c10fe82bea2745898ac9c1ce3581841ff016eb19a117c0d2d2c3856
-
SSDEEP
6144:PEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpoZ8:PMpASIcWYx2U6hAJQn6
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-