General
-
Target
74aa019566ec3267791f75f24f4da3c3cc6b9814b37da8dea287639dcc5c51a5N.exe
-
Size
51KB
-
Sample
241216-m11ldaxmas
-
MD5
de6a83dccbb4637f6998ab3d902bc520
-
SHA1
3dbbd9e0e3fb9cac1a1f11ed770d7d272a5a0ffd
-
SHA256
74aa019566ec3267791f75f24f4da3c3cc6b9814b37da8dea287639dcc5c51a5
-
SHA512
54839947280f83df6340d1ea3b5b14c1fcb40221d6d848426c10e8897e2a32c0ea76801a73c089aed8ac68c9c156a6213682bd5cc9883c0b8eaf8e7d310d5838
-
SSDEEP
1536:lVeVFl6sRsDnQi1Mek/pFRMfKaP7cFwQkXuJXqmrM:v23sD1vSP6cOYXqm4
Static task
static1
Behavioral task
behavioral1
Sample
74aa019566ec3267791f75f24f4da3c3cc6b9814b37da8dea287639dcc5c51a5N.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
74aa019566ec3267791f75f24f4da3c3cc6b9814b37da8dea287639dcc5c51a5N.exe
-
Size
51KB
-
MD5
de6a83dccbb4637f6998ab3d902bc520
-
SHA1
3dbbd9e0e3fb9cac1a1f11ed770d7d272a5a0ffd
-
SHA256
74aa019566ec3267791f75f24f4da3c3cc6b9814b37da8dea287639dcc5c51a5
-
SHA512
54839947280f83df6340d1ea3b5b14c1fcb40221d6d848426c10e8897e2a32c0ea76801a73c089aed8ac68c9c156a6213682bd5cc9883c0b8eaf8e7d310d5838
-
SSDEEP
1536:lVeVFl6sRsDnQi1Mek/pFRMfKaP7cFwQkXuJXqmrM:v23sD1vSP6cOYXqm4
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-