General
-
Target
c9457f10cf4ae06df93304088a646a5aab0bfafa0ba882eb7b19d31e8a03e17eN.exe
-
Size
337KB
-
Sample
241206-ftrass1rbw
-
MD5
bb2fd47ba0745b3048eac29cb2d0e4c0
-
SHA1
6301acad5ed51e3fc37e71af6328c7d1690ce244
-
SHA256
c9457f10cf4ae06df93304088a646a5aab0bfafa0ba882eb7b19d31e8a03e17e
-
SHA512
f91810d6129f6d7adfc29b48be049673957b89a05afd494eb4a8295478f19d1fe40e91dd383746cf485371ec72493042a85e615070d28539bb7e035dd00ac965
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYWa:vHW138/iXWlK885rKlGSekcj66ciu
Static task
static1
Behavioral task
behavioral1
Sample
c9457f10cf4ae06df93304088a646a5aab0bfafa0ba882eb7b19d31e8a03e17eN.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
c9457f10cf4ae06df93304088a646a5aab0bfafa0ba882eb7b19d31e8a03e17eN.exe
-
Size
337KB
-
MD5
bb2fd47ba0745b3048eac29cb2d0e4c0
-
SHA1
6301acad5ed51e3fc37e71af6328c7d1690ce244
-
SHA256
c9457f10cf4ae06df93304088a646a5aab0bfafa0ba882eb7b19d31e8a03e17e
-
SHA512
f91810d6129f6d7adfc29b48be049673957b89a05afd494eb4a8295478f19d1fe40e91dd383746cf485371ec72493042a85e615070d28539bb7e035dd00ac965
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYWa:vHW138/iXWlK885rKlGSekcj66ciu
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-