General
-
Target
265c6afff3656865309d98fc9193994a51fecf9d175135aed711dedc4dcf1ca5N.exe
-
Size
68KB
-
Sample
241124-sdkjjavlh1
-
MD5
78e86155841e49c1de9f7e35a10c19d0
-
SHA1
797c7e633949b54ee0f2b5f6c68a821cb28a76d0
-
SHA256
265c6afff3656865309d98fc9193994a51fecf9d175135aed711dedc4dcf1ca5
-
SHA512
86b39651c0988563d657ac6c5bb315b2684acb47996a13281b28e46c715f5d07eb7e144556deab074c482bec9625479fcc0b17aa63587e87a75f9cdd3a243756
-
SSDEEP
1536:04/WgLAjdZsp+uChoLnDeoqYAJjvLFymnHsPeOrG:l//AjMp+u2onejH2PeEG
Static task
static1
Behavioral task
behavioral1
Sample
265c6afff3656865309d98fc9193994a51fecf9d175135aed711dedc4dcf1ca5N.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
265c6afff3656865309d98fc9193994a51fecf9d175135aed711dedc4dcf1ca5N.exe
-
Size
68KB
-
MD5
78e86155841e49c1de9f7e35a10c19d0
-
SHA1
797c7e633949b54ee0f2b5f6c68a821cb28a76d0
-
SHA256
265c6afff3656865309d98fc9193994a51fecf9d175135aed711dedc4dcf1ca5
-
SHA512
86b39651c0988563d657ac6c5bb315b2684acb47996a13281b28e46c715f5d07eb7e144556deab074c482bec9625479fcc0b17aa63587e87a75f9cdd3a243756
-
SSDEEP
1536:04/WgLAjdZsp+uChoLnDeoqYAJjvLFymnHsPeOrG:l//AjMp+u2onejH2PeEG
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-