General
-
Target
071e94542186d4512758ff79e49b0ad7d6c2a0f6d0a9a9bcd8c8eb7ded21fb3cN.exe
-
Size
66KB
-
Sample
241125-m7sjcaznfn
-
MD5
4a2c1da189ad6073e0a4f0815b1c04d0
-
SHA1
44afbeb90d3347544fcce54013d2640630283130
-
SHA256
071e94542186d4512758ff79e49b0ad7d6c2a0f6d0a9a9bcd8c8eb7ded21fb3c
-
SHA512
f87f2c8830db62d47387025cd56a89262e9d2ff5005617e74a6e897dc9fae062214ac5d19d7f83503992e3e92947dd013034601d6ca23e9b9ebdfddbf0b5ace5
-
SSDEEP
1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTmUD0l:6bQRSHpAvzyf7MzeThD0l
Static task
static1
Behavioral task
behavioral1
Sample
071e94542186d4512758ff79e49b0ad7d6c2a0f6d0a9a9bcd8c8eb7ded21fb3cN.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
071e94542186d4512758ff79e49b0ad7d6c2a0f6d0a9a9bcd8c8eb7ded21fb3cN.exe
-
Size
66KB
-
MD5
4a2c1da189ad6073e0a4f0815b1c04d0
-
SHA1
44afbeb90d3347544fcce54013d2640630283130
-
SHA256
071e94542186d4512758ff79e49b0ad7d6c2a0f6d0a9a9bcd8c8eb7ded21fb3c
-
SHA512
f87f2c8830db62d47387025cd56a89262e9d2ff5005617e74a6e897dc9fae062214ac5d19d7f83503992e3e92947dd013034601d6ca23e9b9ebdfddbf0b5ace5
-
SSDEEP
1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTmUD0l:6bQRSHpAvzyf7MzeThD0l
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-