General
-
Target
152e8085421d2f4f114a78a231ed4745e62dcd3c69106cbea065cc5221887407N.exe
-
Size
69KB
-
Sample
241215-18h8ys1pgm
-
MD5
ab571f694f3f9ef487dd3ed149920920
-
SHA1
28ee594007c46aa088073f0b16f6bca132db9c36
-
SHA256
152e8085421d2f4f114a78a231ed4745e62dcd3c69106cbea065cc5221887407
-
SHA512
5b6a9159e2b04322ba034f685d9042bd4b54097ee3263b60ab0a6a8076197e51e00dd77dc29cacd9d702087ab9abc0f50b2ff7350bd04b3de064cb150ae0e7ec
-
SSDEEP
1536:04/WgLAjdZsp+uChoLnDeoqYAJjvLFymnHsPeOtf:l//AjMp+u2onejH2PeA
Static task
static1
Behavioral task
behavioral1
Sample
152e8085421d2f4f114a78a231ed4745e62dcd3c69106cbea065cc5221887407N.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
152e8085421d2f4f114a78a231ed4745e62dcd3c69106cbea065cc5221887407N.exe
-
Size
69KB
-
MD5
ab571f694f3f9ef487dd3ed149920920
-
SHA1
28ee594007c46aa088073f0b16f6bca132db9c36
-
SHA256
152e8085421d2f4f114a78a231ed4745e62dcd3c69106cbea065cc5221887407
-
SHA512
5b6a9159e2b04322ba034f685d9042bd4b54097ee3263b60ab0a6a8076197e51e00dd77dc29cacd9d702087ab9abc0f50b2ff7350bd04b3de064cb150ae0e7ec
-
SSDEEP
1536:04/WgLAjdZsp+uChoLnDeoqYAJjvLFymnHsPeOtf:l//AjMp+u2onejH2PeA
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-