General
-
Target
e5159eee09b252923c7ae8ffe2ab90a7c771a840462c454761602561bf6752eeN.exe
-
Size
476KB
-
Sample
250117-c8wx2szjht
-
MD5
46352f161dc8a1a881cadad39759d540
-
SHA1
72c614b160072cfd03722eabe2067d993a44f2c3
-
SHA256
e5159eee09b252923c7ae8ffe2ab90a7c771a840462c454761602561bf6752ee
-
SHA512
65349572521cf4dedd3d2960362866056ded85b0c510d1623deff13bd2cf88479bf6882c648ef44c06f11a889aa7843b58a159ee752080589fb8eed725085d9e
-
SSDEEP
6144:CTi96BdkH51VwQg6ZyEuA9WU3C8Pd+fFPsjP/:CTi96QpwQ1yVAd3C8VgFPY3
Static task
static1
Behavioral task
behavioral1
Sample
e5159eee09b252923c7ae8ffe2ab90a7c771a840462c454761602561bf6752eeN.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.226
218.54.31.165
Targets
-
-
Target
e5159eee09b252923c7ae8ffe2ab90a7c771a840462c454761602561bf6752eeN.exe
-
Size
476KB
-
MD5
46352f161dc8a1a881cadad39759d540
-
SHA1
72c614b160072cfd03722eabe2067d993a44f2c3
-
SHA256
e5159eee09b252923c7ae8ffe2ab90a7c771a840462c454761602561bf6752ee
-
SHA512
65349572521cf4dedd3d2960362866056ded85b0c510d1623deff13bd2cf88479bf6882c648ef44c06f11a889aa7843b58a159ee752080589fb8eed725085d9e
-
SSDEEP
6144:CTi96BdkH51VwQg6ZyEuA9WU3C8Pd+fFPsjP/:CTi96QpwQ1yVAd3C8VgFPY3
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-