General
-
Target
21480ffe56f5460fbacedb9be1b3eca99187508c84472c80399da4ba71c47ad9
-
Size
57KB
-
Sample
241207-zbxjmsxnfp
-
MD5
96ccbbccea90a36ee09c09f3af7710ea
-
SHA1
ce46d83f05332539ae28be08679c6d289d79fa2e
-
SHA256
21480ffe56f5460fbacedb9be1b3eca99187508c84472c80399da4ba71c47ad9
-
SHA512
af50be52ad620b68e81155ac5dc5bcc609e1dd99a0b790db5436eef722371b23bb53c9f15c72ed92e83307b1624efe529863dcfbc33cd4bf21299646d85017aa
-
SSDEEP
1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8/:MOemdTd1o74qlmbbJ+x+Ikd
Static task
static1
Behavioral task
behavioral1
Sample
21480ffe56f5460fbacedb9be1b3eca99187508c84472c80399da4ba71c47ad9.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
21480ffe56f5460fbacedb9be1b3eca99187508c84472c80399da4ba71c47ad9
-
Size
57KB
-
MD5
96ccbbccea90a36ee09c09f3af7710ea
-
SHA1
ce46d83f05332539ae28be08679c6d289d79fa2e
-
SHA256
21480ffe56f5460fbacedb9be1b3eca99187508c84472c80399da4ba71c47ad9
-
SHA512
af50be52ad620b68e81155ac5dc5bcc609e1dd99a0b790db5436eef722371b23bb53c9f15c72ed92e83307b1624efe529863dcfbc33cd4bf21299646d85017aa
-
SSDEEP
1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8/:MOemdTd1o74qlmbbJ+x+Ikd
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-