General
-
Target
de9aa85cc6db379e1d8ca80a4522611da38f3fba63956a22747a6d360d9ec504N.exe
-
Size
62KB
-
Sample
241208-a474easret
-
MD5
235624e41182355162b9b273e1205680
-
SHA1
666dc4c670fe1649455a2fac736e180c4733516b
-
SHA256
de9aa85cc6db379e1d8ca80a4522611da38f3fba63956a22747a6d360d9ec504
-
SHA512
0fa906be6e3c50f3bb7522cd5e7e53090eeede7efc3cf57f75273a018dbdfddce52ac56dbb6b6a5d390a5d97b33e5117bafc887e68e3159c3799f44c37f98df6
-
SSDEEP
1536:saTkcl2v/z0thjkh6+uYLo31d0JuPrROVd6F:Jo0cAthu6+FQ0JuPkd6F
Static task
static1
Behavioral task
behavioral1
Sample
de9aa85cc6db379e1d8ca80a4522611da38f3fba63956a22747a6d360d9ec504N.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
de9aa85cc6db379e1d8ca80a4522611da38f3fba63956a22747a6d360d9ec504N.exe
-
Size
62KB
-
MD5
235624e41182355162b9b273e1205680
-
SHA1
666dc4c670fe1649455a2fac736e180c4733516b
-
SHA256
de9aa85cc6db379e1d8ca80a4522611da38f3fba63956a22747a6d360d9ec504
-
SHA512
0fa906be6e3c50f3bb7522cd5e7e53090eeede7efc3cf57f75273a018dbdfddce52ac56dbb6b6a5d390a5d97b33e5117bafc887e68e3159c3799f44c37f98df6
-
SSDEEP
1536:saTkcl2v/z0thjkh6+uYLo31d0JuPrROVd6F:Jo0cAthu6+FQ0JuPkd6F
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-