General
-
Target
fdc6c9e29a51b677a545312d15efc66907a69d56ba13ae06bcbfbe49cbca0a69N.exe
-
Size
335KB
-
Sample
241124-pbbbasvngl
-
MD5
714315fad3e335b5c939b4a8e0b2fcd0
-
SHA1
7bdfff1f79148b07533a1cb44297ca9f7b61baca
-
SHA256
fdc6c9e29a51b677a545312d15efc66907a69d56ba13ae06bcbfbe49cbca0a69
-
SHA512
70dbaa0e86243871e9872fdefa6d7d1b49777ebee96316812b40f9c53b0cb32278be6501a4f8729734c04e243ad726f08283f6ee59970dfdeee4307942eff86f
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIQ:vHW138/iXWlK885rKlGSekcj66ci8
Static task
static1
Behavioral task
behavioral1
Sample
fdc6c9e29a51b677a545312d15efc66907a69d56ba13ae06bcbfbe49cbca0a69N.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
fdc6c9e29a51b677a545312d15efc66907a69d56ba13ae06bcbfbe49cbca0a69N.exe
-
Size
335KB
-
MD5
714315fad3e335b5c939b4a8e0b2fcd0
-
SHA1
7bdfff1f79148b07533a1cb44297ca9f7b61baca
-
SHA256
fdc6c9e29a51b677a545312d15efc66907a69d56ba13ae06bcbfbe49cbca0a69
-
SHA512
70dbaa0e86243871e9872fdefa6d7d1b49777ebee96316812b40f9c53b0cb32278be6501a4f8729734c04e243ad726f08283f6ee59970dfdeee4307942eff86f
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIQ:vHW138/iXWlK885rKlGSekcj66ci8
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-