General
-
Target
644182d7f93dd2ecfd6f48e41c19d43868b8417aaa5a62092b7fb70eba72c1e1N.exe
-
Size
57KB
-
Sample
241218-g7gh7aylck
-
MD5
9033f32223a0b27c3bbd742d78e5e260
-
SHA1
43a5e9ccd4457ecf9432daa1437c0864633a5729
-
SHA256
644182d7f93dd2ecfd6f48e41c19d43868b8417aaa5a62092b7fb70eba72c1e1
-
SHA512
e07544cbc63f78349a27878aeedc189983f6e5ece4080fc79928a0acbb8dc314a382e49c514c1e81e966720a1b3ab350b7c8b4fd55109823a3d24e791d12281a
-
SSDEEP
1536:amZ+4hcuX5uZ79jmvFQTXnz9yQ/PFBhl1Lg+:amZ+luXwy2f9LDhDLg+
Static task
static1
Behavioral task
behavioral1
Sample
644182d7f93dd2ecfd6f48e41c19d43868b8417aaa5a62092b7fb70eba72c1e1N.exe
Resource
win7-20240729-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
644182d7f93dd2ecfd6f48e41c19d43868b8417aaa5a62092b7fb70eba72c1e1N.exe
-
Size
57KB
-
MD5
9033f32223a0b27c3bbd742d78e5e260
-
SHA1
43a5e9ccd4457ecf9432daa1437c0864633a5729
-
SHA256
644182d7f93dd2ecfd6f48e41c19d43868b8417aaa5a62092b7fb70eba72c1e1
-
SHA512
e07544cbc63f78349a27878aeedc189983f6e5ece4080fc79928a0acbb8dc314a382e49c514c1e81e966720a1b3ab350b7c8b4fd55109823a3d24e791d12281a
-
SSDEEP
1536:amZ+4hcuX5uZ79jmvFQTXnz9yQ/PFBhl1Lg+:amZ+luXwy2f9LDhDLg+
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-