General
-
Target
ad8b452c8ba4ae695e8ffd18f460ab8204bffb082cbed03479c39b0affabc855N.exe
-
Size
68KB
-
Sample
241205-tx8k5sslg1
-
MD5
facad75e1380f7fc64a615c1ebdd81b0
-
SHA1
0f352ecd5f26961f4328671fcfbef6e657351ca1
-
SHA256
ad8b452c8ba4ae695e8ffd18f460ab8204bffb082cbed03479c39b0affabc855
-
SHA512
90456a3d891a22c844d6775a541890e4179a28008d9522f88b4443f5d3f282709fee557b465b0182f3d93e5e129f428816fa64d5c06c34d1bc613aa0e0c575db
-
SSDEEP
1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCare9:yLAYUzmdD0sMQl7d7IuhCai9
Static task
static1
Behavioral task
behavioral1
Sample
ad8b452c8ba4ae695e8ffd18f460ab8204bffb082cbed03479c39b0affabc855N.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
ad8b452c8ba4ae695e8ffd18f460ab8204bffb082cbed03479c39b0affabc855N.exe
-
Size
68KB
-
MD5
facad75e1380f7fc64a615c1ebdd81b0
-
SHA1
0f352ecd5f26961f4328671fcfbef6e657351ca1
-
SHA256
ad8b452c8ba4ae695e8ffd18f460ab8204bffb082cbed03479c39b0affabc855
-
SHA512
90456a3d891a22c844d6775a541890e4179a28008d9522f88b4443f5d3f282709fee557b465b0182f3d93e5e129f428816fa64d5c06c34d1bc613aa0e0c575db
-
SSDEEP
1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCare9:yLAYUzmdD0sMQl7d7IuhCai9
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-