General
-
Target
24258df175120de2e38369b4bc77830760474b0294e895082fe60f4305463967
-
Size
77KB
-
Sample
241217-zgbjcsxlfz
-
MD5
ceaff38468883ba072bbfd583be824ae
-
SHA1
2f42adfcb136288a65dda54539f4b4bbf3910579
-
SHA256
24258df175120de2e38369b4bc77830760474b0294e895082fe60f4305463967
-
SHA512
5e02e4182748e8463baa4adf6f580726cb98da6e927c96a6a16498c384ada36be70e757c25104a64744a07be19cd04f45b2b59dc709a4bc877fb2ead6c6eaa2f
-
SSDEEP
1536:9HxkDvWdB7O9dKymMyCMGni2Lz1LaRQLDbnc:9RkjWjK9ABpGzlaRQLvc
Behavioral task
behavioral1
Sample
24258df175120de2e38369b4bc77830760474b0294e895082fe60f4305463967.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.77
218.54.47.74
Targets
-
-
Target
24258df175120de2e38369b4bc77830760474b0294e895082fe60f4305463967
-
Size
77KB
-
MD5
ceaff38468883ba072bbfd583be824ae
-
SHA1
2f42adfcb136288a65dda54539f4b4bbf3910579
-
SHA256
24258df175120de2e38369b4bc77830760474b0294e895082fe60f4305463967
-
SHA512
5e02e4182748e8463baa4adf6f580726cb98da6e927c96a6a16498c384ada36be70e757c25104a64744a07be19cd04f45b2b59dc709a4bc877fb2ead6c6eaa2f
-
SSDEEP
1536:9HxkDvWdB7O9dKymMyCMGni2Lz1LaRQLDbnc:9RkjWjK9ABpGzlaRQLvc
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-