General
-
Target
40044b6a74c6878ea917eb7fb60f90a6c0d712e89a44b5597070b428e2c1620c.exe
-
Size
337KB
-
Sample
241206-c366tswkhx
-
MD5
53ac000b628536d3b532efbd2d8846b4
-
SHA1
091906986ad4bad87d885985e9b94b8df39dbf1e
-
SHA256
40044b6a74c6878ea917eb7fb60f90a6c0d712e89a44b5597070b428e2c1620c
-
SHA512
56f18871a2d08423b1ab48f062327633c04a0bb20489adc38efda0cfe2d10d551b5fb127968534eb17d3e02c51b155afa7a77108832b3a54ad2da3b6b56cd281
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYl:vHW138/iXWlK885rKlGSekcj66ciU
Static task
static1
Behavioral task
behavioral1
Sample
40044b6a74c6878ea917eb7fb60f90a6c0d712e89a44b5597070b428e2c1620c.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
40044b6a74c6878ea917eb7fb60f90a6c0d712e89a44b5597070b428e2c1620c.exe
-
Size
337KB
-
MD5
53ac000b628536d3b532efbd2d8846b4
-
SHA1
091906986ad4bad87d885985e9b94b8df39dbf1e
-
SHA256
40044b6a74c6878ea917eb7fb60f90a6c0d712e89a44b5597070b428e2c1620c
-
SHA512
56f18871a2d08423b1ab48f062327633c04a0bb20489adc38efda0cfe2d10d551b5fb127968534eb17d3e02c51b155afa7a77108832b3a54ad2da3b6b56cd281
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYl:vHW138/iXWlK885rKlGSekcj66ciU
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-