General
-
Target
4c01e91e5ca898f23f5b498482623a4ecb24e4775a211dec52c0eb4a7eeebd03N.exe
-
Size
81KB
-
Sample
241216-kvtjrstjfy
-
MD5
d21a935b031667728fbc09c0d9d38ec0
-
SHA1
03cb26b130ba8465fb4b438b616447a4d8487e50
-
SHA256
4c01e91e5ca898f23f5b498482623a4ecb24e4775a211dec52c0eb4a7eeebd03
-
SHA512
d4d41dfaa3e23a859866b4f42f8d5674b437383e103e5377788911839c6381b5d0cc3772a5cd565d00e53103bb1553d4a5d90f8f9b37c6a7376550abbfe3bab9
-
SSDEEP
1536:UOzC0tKyIy9nOM8e5rqYJkdpzCEw2dnU4qv8L:UO9Ro2rqYyXzCEwG7
Static task
static1
Behavioral task
behavioral1
Sample
4c01e91e5ca898f23f5b498482623a4ecb24e4775a211dec52c0eb4a7eeebd03N.exe
Resource
win7-20240729-en
Malware Config
Extracted
urelas
112.175.88.207
112.175.88.208
Targets
-
-
Target
4c01e91e5ca898f23f5b498482623a4ecb24e4775a211dec52c0eb4a7eeebd03N.exe
-
Size
81KB
-
MD5
d21a935b031667728fbc09c0d9d38ec0
-
SHA1
03cb26b130ba8465fb4b438b616447a4d8487e50
-
SHA256
4c01e91e5ca898f23f5b498482623a4ecb24e4775a211dec52c0eb4a7eeebd03
-
SHA512
d4d41dfaa3e23a859866b4f42f8d5674b437383e103e5377788911839c6381b5d0cc3772a5cd565d00e53103bb1553d4a5d90f8f9b37c6a7376550abbfe3bab9
-
SSDEEP
1536:UOzC0tKyIy9nOM8e5rqYJkdpzCEw2dnU4qv8L:UO9Ro2rqYyXzCEwG7
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-