General
-
Target
7336773cda35ca7da53e9ce3454d2f5094fe7d20e79397c338814106b94b6d7d.exe
-
Size
338KB
-
Sample
241206-xg13xaxmhj
-
MD5
3e4c16d9130d98dfcf7ca845d4c34b80
-
SHA1
c72fca9756823d85ec81ca9856cce7604a49e0e7
-
SHA256
7336773cda35ca7da53e9ce3454d2f5094fe7d20e79397c338814106b94b6d7d
-
SHA512
9788b0f06265a0f19e66fc4ed97559b861534b3896cfd7bb78ac6b4f4707894a4ec76963970331bfeb37b95e1281c5492689906e0bfe1cb581c459530dfae5ef
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYWE:vHW138/iXWlK885rKlGSekcj66ciI
Static task
static1
Behavioral task
behavioral1
Sample
7336773cda35ca7da53e9ce3454d2f5094fe7d20e79397c338814106b94b6d7d.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
7336773cda35ca7da53e9ce3454d2f5094fe7d20e79397c338814106b94b6d7d.exe
-
Size
338KB
-
MD5
3e4c16d9130d98dfcf7ca845d4c34b80
-
SHA1
c72fca9756823d85ec81ca9856cce7604a49e0e7
-
SHA256
7336773cda35ca7da53e9ce3454d2f5094fe7d20e79397c338814106b94b6d7d
-
SHA512
9788b0f06265a0f19e66fc4ed97559b861534b3896cfd7bb78ac6b4f4707894a4ec76963970331bfeb37b95e1281c5492689906e0bfe1cb581c459530dfae5ef
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYWE:vHW138/iXWlK885rKlGSekcj66ciI
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-