General
-
Target
19684c0ade8e1779e1646f2c407c164d0028f4f5a9adbb79bda1234fce67a16c.exe
-
Size
68KB
-
Sample
241218-f6gxwsvngv
-
MD5
4b843db0be5fe85a50d692fc422facd2
-
SHA1
8433f8a5dbf7a7098941e22428474418b96907c4
-
SHA256
19684c0ade8e1779e1646f2c407c164d0028f4f5a9adbb79bda1234fce67a16c
-
SHA512
abccc913e6f05332febd6937ba89da0ee9805ea68f3539ef188f28d052a25c9abb9f0f0bc1c0db53957def83a762b5de5720d7baaef6135648f5c3267bb21ef9
-
SSDEEP
1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCarV:yLAYUzmdD0sMQl7d7IuhCaB
Static task
static1
Behavioral task
behavioral1
Sample
19684c0ade8e1779e1646f2c407c164d0028f4f5a9adbb79bda1234fce67a16c.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
19684c0ade8e1779e1646f2c407c164d0028f4f5a9adbb79bda1234fce67a16c.exe
-
Size
68KB
-
MD5
4b843db0be5fe85a50d692fc422facd2
-
SHA1
8433f8a5dbf7a7098941e22428474418b96907c4
-
SHA256
19684c0ade8e1779e1646f2c407c164d0028f4f5a9adbb79bda1234fce67a16c
-
SHA512
abccc913e6f05332febd6937ba89da0ee9805ea68f3539ef188f28d052a25c9abb9f0f0bc1c0db53957def83a762b5de5720d7baaef6135648f5c3267bb21ef9
-
SSDEEP
1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCarV:yLAYUzmdD0sMQl7d7IuhCaB
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-