General
-
Target
1f4ffae1d208aa2da2fc5364702a0999f92db988820b695c723fd34fb514df7dN.exe
-
Size
52KB
-
Sample
241206-clbnlavkhv
-
MD5
eb71479977873ddd18b7b92c961f5c90
-
SHA1
3beb9a164c32065d3c41572cfc7b0e0b7c8dccdc
-
SHA256
1f4ffae1d208aa2da2fc5364702a0999f92db988820b695c723fd34fb514df7d
-
SHA512
64fd33316114e8d3d1f74b7573b860f752659ae107b01ded4e2722927cd855824b64ba09f5ea284d4007ebc32f2c3afcf4aa7656a77d197b73f8df03989fc84d
-
SSDEEP
1536:vMcQYte55zs091Zw9FAGDdJYipvwGf9ogjrg1:vMhAe5Zs091KI+JYixw49XjrE
Static task
static1
Behavioral task
behavioral1
Sample
1f4ffae1d208aa2da2fc5364702a0999f92db988820b695c723fd34fb514df7dN.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
1f4ffae1d208aa2da2fc5364702a0999f92db988820b695c723fd34fb514df7dN.exe
-
Size
52KB
-
MD5
eb71479977873ddd18b7b92c961f5c90
-
SHA1
3beb9a164c32065d3c41572cfc7b0e0b7c8dccdc
-
SHA256
1f4ffae1d208aa2da2fc5364702a0999f92db988820b695c723fd34fb514df7d
-
SHA512
64fd33316114e8d3d1f74b7573b860f752659ae107b01ded4e2722927cd855824b64ba09f5ea284d4007ebc32f2c3afcf4aa7656a77d197b73f8df03989fc84d
-
SSDEEP
1536:vMcQYte55zs091Zw9FAGDdJYipvwGf9ogjrg1:vMhAe5Zs091KI+JYixw49XjrE
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-