General
-
Target
9b4b13dbca371f99fe0defc8d6c2370d7513d923061385636b2f344d0e6e07d3N.exe
-
Size
510KB
-
Sample
241205-zqd1va1pht
-
MD5
b639bc0a212aee9bc09ae316daff5210
-
SHA1
240e3ec4bc4255de9a585442aebf034a6df69c4c
-
SHA256
9b4b13dbca371f99fe0defc8d6c2370d7513d923061385636b2f344d0e6e07d3
-
SHA512
36f549f9e1a4deb187cbd7e2bab8c16cb31078e2d5a503f8949abf077f4389ce96198d3fbdead95632e5c284c6269625fb2bba87bcaf96f6c1641ff61485ad07
-
SSDEEP
12288:3o7CGWcQSyYI2VrFKH5RBv9AQ1pEDdKou:3MUv2LAv9AQ1p4dKb
Behavioral task
behavioral1
Sample
9b4b13dbca371f99fe0defc8d6c2370d7513d923061385636b2f344d0e6e07d3N.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
9b4b13dbca371f99fe0defc8d6c2370d7513d923061385636b2f344d0e6e07d3N.exe
-
Size
510KB
-
MD5
b639bc0a212aee9bc09ae316daff5210
-
SHA1
240e3ec4bc4255de9a585442aebf034a6df69c4c
-
SHA256
9b4b13dbca371f99fe0defc8d6c2370d7513d923061385636b2f344d0e6e07d3
-
SHA512
36f549f9e1a4deb187cbd7e2bab8c16cb31078e2d5a503f8949abf077f4389ce96198d3fbdead95632e5c284c6269625fb2bba87bcaf96f6c1641ff61485ad07
-
SSDEEP
12288:3o7CGWcQSyYI2VrFKH5RBv9AQ1pEDdKou:3MUv2LAv9AQ1p4dKb
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-