General
-
Target
643551061bb861652f3ed1c650483526cd40985c09440becd403eb42444b75b1N.exe
-
Size
275KB
-
Sample
241206-f8hl7ssmfv
-
MD5
4f484ec903da6d4e4fca1f56b3a0f5e0
-
SHA1
053c14798282218e84fadacb5b7c06129cc73b38
-
SHA256
643551061bb861652f3ed1c650483526cd40985c09440becd403eb42444b75b1
-
SHA512
eecafc7fd8acf4f08459150a9e8d1a2a32b6a7e9fc7205c57807209784b6c4a1d967aee842031c8547aaeb4ad50f758f8cf2bc7166ccda2cef835a2d6f4017c8
-
SSDEEP
6144:YBJz8I3EKuteh0AemMzbUNnWNt+xXEUPW:6B8I0vtHLPUNWv+xXDW
Static task
static1
Behavioral task
behavioral1
Sample
643551061bb861652f3ed1c650483526cd40985c09440becd403eb42444b75b1N.exe
Resource
win7-20241023-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.165
218.54.31.226
Targets
-
-
Target
643551061bb861652f3ed1c650483526cd40985c09440becd403eb42444b75b1N.exe
-
Size
275KB
-
MD5
4f484ec903da6d4e4fca1f56b3a0f5e0
-
SHA1
053c14798282218e84fadacb5b7c06129cc73b38
-
SHA256
643551061bb861652f3ed1c650483526cd40985c09440becd403eb42444b75b1
-
SHA512
eecafc7fd8acf4f08459150a9e8d1a2a32b6a7e9fc7205c57807209784b6c4a1d967aee842031c8547aaeb4ad50f758f8cf2bc7166ccda2cef835a2d6f4017c8
-
SSDEEP
6144:YBJz8I3EKuteh0AemMzbUNnWNt+xXEUPW:6B8I0vtHLPUNWv+xXDW
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-