General
-
Target
e286b463e845bb5b609a3d45b6a5ac5c5a3c1219fbab1f17da5ab318c90f8137N.exe
-
Size
68KB
-
Sample
241219-1n57zs1jb1
-
MD5
f85b03881414df2e80f44a0694261fc0
-
SHA1
40783dcb8d37a65560e3e7bb9bb1fd89b92a5dab
-
SHA256
e286b463e845bb5b609a3d45b6a5ac5c5a3c1219fbab1f17da5ab318c90f8137
-
SHA512
ea794b7dd2262e126864cb5107e12cf7989308313dc600a73e4b0e10df429dc5efedee8c8bb141521af692d3bb7c5b2f0be4e0d5844fc806104b56ac177092b4
-
SSDEEP
1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCart:yLAYUzmdD0sMQl7d7IuhCaJ
Static task
static1
Behavioral task
behavioral1
Sample
e286b463e845bb5b609a3d45b6a5ac5c5a3c1219fbab1f17da5ab318c90f8137N.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
e286b463e845bb5b609a3d45b6a5ac5c5a3c1219fbab1f17da5ab318c90f8137N.exe
-
Size
68KB
-
MD5
f85b03881414df2e80f44a0694261fc0
-
SHA1
40783dcb8d37a65560e3e7bb9bb1fd89b92a5dab
-
SHA256
e286b463e845bb5b609a3d45b6a5ac5c5a3c1219fbab1f17da5ab318c90f8137
-
SHA512
ea794b7dd2262e126864cb5107e12cf7989308313dc600a73e4b0e10df429dc5efedee8c8bb141521af692d3bb7c5b2f0be4e0d5844fc806104b56ac177092b4
-
SSDEEP
1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCart:yLAYUzmdD0sMQl7d7IuhCaJ
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-