General
-
Target
b64420898566616070012c2e72fd072df364c9a2b07436cd0af220ea9ce42589.exe
-
Size
57KB
-
Sample
241218-gd3vbsxjbl
-
MD5
e69151a20a6162cfa8d39298e24541e6
-
SHA1
6827b959dbfb0dde179dbb9882c016ebea836875
-
SHA256
b64420898566616070012c2e72fd072df364c9a2b07436cd0af220ea9ce42589
-
SHA512
222584518403ef7257b21d982c15df68673299211b0737c3d05a5ae55377ce57c4888c5b68eb8b0f4ec6bb47766c457e655fa0af7bed127a998e0bda63dbaa08
-
SSDEEP
1536:amZ+4hcuX5uZ79jmvFQTXnz9yQ/PFBhl1Lgu:amZ+luXwy2f9LDhDLgu
Static task
static1
Behavioral task
behavioral1
Sample
b64420898566616070012c2e72fd072df364c9a2b07436cd0af220ea9ce42589.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
b64420898566616070012c2e72fd072df364c9a2b07436cd0af220ea9ce42589.exe
-
Size
57KB
-
MD5
e69151a20a6162cfa8d39298e24541e6
-
SHA1
6827b959dbfb0dde179dbb9882c016ebea836875
-
SHA256
b64420898566616070012c2e72fd072df364c9a2b07436cd0af220ea9ce42589
-
SHA512
222584518403ef7257b21d982c15df68673299211b0737c3d05a5ae55377ce57c4888c5b68eb8b0f4ec6bb47766c457e655fa0af7bed127a998e0bda63dbaa08
-
SSDEEP
1536:amZ+4hcuX5uZ79jmvFQTXnz9yQ/PFBhl1Lgu:amZ+luXwy2f9LDhDLgu
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-