General
-
Target
511e7048c26382693bc5949169e611c67e51687088fcd383453ca5586dc9f9edN.exe
-
Size
508KB
-
Sample
241207-xhtp8atlgj
-
MD5
eb48477271572c6589faed3de0a22420
-
SHA1
ad4fe8092ab79c942e4f55c82dc160bb95885258
-
SHA256
511e7048c26382693bc5949169e611c67e51687088fcd383453ca5586dc9f9ed
-
SHA512
74f037cb5f2174f478adcdde225b1f9fa66d2477ef99c79cee66bbb3abcbcff5be80b4f38e7f9c0c881978da74bf1814331494636319b31cdb5f07e9f8f1661f
-
SSDEEP
12288:3o7CGWcQSyYI2VrFKH5RBv9AQ1pEDdKop:3MUv2LAv9AQ1p4dKY
Behavioral task
behavioral1
Sample
511e7048c26382693bc5949169e611c67e51687088fcd383453ca5586dc9f9edN.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
511e7048c26382693bc5949169e611c67e51687088fcd383453ca5586dc9f9edN.exe
-
Size
508KB
-
MD5
eb48477271572c6589faed3de0a22420
-
SHA1
ad4fe8092ab79c942e4f55c82dc160bb95885258
-
SHA256
511e7048c26382693bc5949169e611c67e51687088fcd383453ca5586dc9f9ed
-
SHA512
74f037cb5f2174f478adcdde225b1f9fa66d2477ef99c79cee66bbb3abcbcff5be80b4f38e7f9c0c881978da74bf1814331494636319b31cdb5f07e9f8f1661f
-
SSDEEP
12288:3o7CGWcQSyYI2VrFKH5RBv9AQ1pEDdKop:3MUv2LAv9AQ1p4dKY
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-