General
-
Target
46426f9f0d2de6b445f6041c0719e4e72e0b4913c99e364acbe4d29aea87df4f.exe
-
Size
77KB
-
Sample
241219-b2s25sskbq
-
MD5
97b11e51b33e17cf11bea701cb05a63a
-
SHA1
009e548758a7624212e527a2e07bff653a076268
-
SHA256
46426f9f0d2de6b445f6041c0719e4e72e0b4913c99e364acbe4d29aea87df4f
-
SHA512
ac623e3bd344ac2c818fdb980cffc337bd2256a882ea7110b4584b66f7db20b273e454c18692e0d0b7b289e67782c97a4e01d728e4b12b3b3722c10e506932a4
-
SSDEEP
1536:1D433Oe20lleqbmruXP+9E5KJ+e8Xwhpf+:1Dcpl1mrE+EeBJfm
Static task
static1
Behavioral task
behavioral1
Sample
46426f9f0d2de6b445f6041c0719e4e72e0b4913c99e364acbe4d29aea87df4f.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
112.175.88.208
112.175.88.207
Targets
-
-
Target
46426f9f0d2de6b445f6041c0719e4e72e0b4913c99e364acbe4d29aea87df4f.exe
-
Size
77KB
-
MD5
97b11e51b33e17cf11bea701cb05a63a
-
SHA1
009e548758a7624212e527a2e07bff653a076268
-
SHA256
46426f9f0d2de6b445f6041c0719e4e72e0b4913c99e364acbe4d29aea87df4f
-
SHA512
ac623e3bd344ac2c818fdb980cffc337bd2256a882ea7110b4584b66f7db20b273e454c18692e0d0b7b289e67782c97a4e01d728e4b12b3b3722c10e506932a4
-
SSDEEP
1536:1D433Oe20lleqbmruXP+9E5KJ+e8Xwhpf+:1Dcpl1mrE+EeBJfm
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-