General
-
Target
d76022b8cfb7ff7756ec20f02a9b102a8e109d5916da75a852cee2327bfcd73bN.exe
-
Size
66KB
-
Sample
241207-f1ekkstnek
-
MD5
525957cb9394b8019da37cb5237ea960
-
SHA1
d8fdb97bef17159b94696c818b486a4eaae9383d
-
SHA256
d76022b8cfb7ff7756ec20f02a9b102a8e109d5916da75a852cee2327bfcd73b
-
SHA512
5860f49f5a7870ba4f119042cd974ca18e39ba0a0cacf53b206b0e7d730ac3a8bf379f5fa33044f8904d52a1b1cc71a2ff25f70a4324a0445c4922c55365ed88
-
SSDEEP
1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTmUD0l:6bQRSHpAvzyf7MzeThD0l
Static task
static1
Behavioral task
behavioral1
Sample
d76022b8cfb7ff7756ec20f02a9b102a8e109d5916da75a852cee2327bfcd73bN.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
d76022b8cfb7ff7756ec20f02a9b102a8e109d5916da75a852cee2327bfcd73bN.exe
-
Size
66KB
-
MD5
525957cb9394b8019da37cb5237ea960
-
SHA1
d8fdb97bef17159b94696c818b486a4eaae9383d
-
SHA256
d76022b8cfb7ff7756ec20f02a9b102a8e109d5916da75a852cee2327bfcd73b
-
SHA512
5860f49f5a7870ba4f119042cd974ca18e39ba0a0cacf53b206b0e7d730ac3a8bf379f5fa33044f8904d52a1b1cc71a2ff25f70a4324a0445c4922c55365ed88
-
SSDEEP
1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTmUD0l:6bQRSHpAvzyf7MzeThD0l
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-