General
-
Target
13e64d000514469371c856753fbada0ad3702cc8c878a36ba88623ce7f321899.exe
-
Size
71KB
-
Sample
241124-xn824atqas
-
MD5
24932fd070e98fbbdb2c175639cf9aca
-
SHA1
60a1680e111514923714318ebff16340ef4959fe
-
SHA256
13e64d000514469371c856753fbada0ad3702cc8c878a36ba88623ce7f321899
-
SHA512
188db705003ec54c635a1cea66cb5db5c75ad216ddc73494c412102b3f4fd8820728681050b39a8ed1f78ba606e67eda3533689c2ce386582aff38053841fa72
-
SSDEEP
1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCarawW:yLAYUzmdD0sMQl7d7IuhCaeh
Static task
static1
Behavioral task
behavioral1
Sample
13e64d000514469371c856753fbada0ad3702cc8c878a36ba88623ce7f321899.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
13e64d000514469371c856753fbada0ad3702cc8c878a36ba88623ce7f321899.exe
-
Size
71KB
-
MD5
24932fd070e98fbbdb2c175639cf9aca
-
SHA1
60a1680e111514923714318ebff16340ef4959fe
-
SHA256
13e64d000514469371c856753fbada0ad3702cc8c878a36ba88623ce7f321899
-
SHA512
188db705003ec54c635a1cea66cb5db5c75ad216ddc73494c412102b3f4fd8820728681050b39a8ed1f78ba606e67eda3533689c2ce386582aff38053841fa72
-
SSDEEP
1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCarawW:yLAYUzmdD0sMQl7d7IuhCaeh
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-