General
-
Target
419ee4c3985eb7c218985ea45f130bd6c8a7193ec0885f107cd2ccfe060365de.exe
-
Size
141KB
-
Sample
241207-acvzrs1lgr
-
MD5
c305d4ae239732b32d3abb574dbdc908
-
SHA1
d7b01f5963df1f64d9ab497ab26da9ceced170dd
-
SHA256
419ee4c3985eb7c218985ea45f130bd6c8a7193ec0885f107cd2ccfe060365de
-
SHA512
4e529416c2a417725dfaa99410027685ddf22f02d319dc6b1da960eb130e3fa79c118a3e85b18d5ac319c1116b5dadc8de79d244683a6067b1d6171a862d2a35
-
SSDEEP
1536:P/oEkqfCZ10zcT9Yh8AIXcjyz9cOXfiXGImcatMrsWjcdf6odgR5APfIQ:P/5kqCxiXEcO3XfGf2tMUf6odgR5A4Q
Behavioral task
behavioral1
Sample
419ee4c3985eb7c218985ea45f130bd6c8a7193ec0885f107cd2ccfe060365de.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
419ee4c3985eb7c218985ea45f130bd6c8a7193ec0885f107cd2ccfe060365de.exe
-
Size
141KB
-
MD5
c305d4ae239732b32d3abb574dbdc908
-
SHA1
d7b01f5963df1f64d9ab497ab26da9ceced170dd
-
SHA256
419ee4c3985eb7c218985ea45f130bd6c8a7193ec0885f107cd2ccfe060365de
-
SHA512
4e529416c2a417725dfaa99410027685ddf22f02d319dc6b1da960eb130e3fa79c118a3e85b18d5ac319c1116b5dadc8de79d244683a6067b1d6171a862d2a35
-
SSDEEP
1536:P/oEkqfCZ10zcT9Yh8AIXcjyz9cOXfiXGImcatMrsWjcdf6odgR5APfIQ:P/5kqCxiXEcO3XfGf2tMUf6odgR5A4Q
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-