General
-
Target
580e7e7073aaf40b8e8dfca018543e534f44bf9ad3a620a7e727925fc7eb8eec.exe
-
Size
335KB
-
Sample
250117-e91nqstjbp
-
MD5
306a25f7a1b018a8e5c7d1b25eb747aa
-
SHA1
b6e1e08204c8a582f115165238c4da65d2c00d41
-
SHA256
580e7e7073aaf40b8e8dfca018543e534f44bf9ad3a620a7e727925fc7eb8eec
-
SHA512
e3f54f453618d86ee36816a6b07b3d5b9ef09c627e87d8f6e7b492eb74369aff4105044cb2df96a6d50ad2e0d17747a8e359843188df288fd841b0f057e309b7
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcz:vHW138/iXWlK885rKlGSekcj66ciE
Static task
static1
Behavioral task
behavioral1
Sample
580e7e7073aaf40b8e8dfca018543e534f44bf9ad3a620a7e727925fc7eb8eec.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
580e7e7073aaf40b8e8dfca018543e534f44bf9ad3a620a7e727925fc7eb8eec.exe
-
Size
335KB
-
MD5
306a25f7a1b018a8e5c7d1b25eb747aa
-
SHA1
b6e1e08204c8a582f115165238c4da65d2c00d41
-
SHA256
580e7e7073aaf40b8e8dfca018543e534f44bf9ad3a620a7e727925fc7eb8eec
-
SHA512
e3f54f453618d86ee36816a6b07b3d5b9ef09c627e87d8f6e7b492eb74369aff4105044cb2df96a6d50ad2e0d17747a8e359843188df288fd841b0f057e309b7
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcz:vHW138/iXWlK885rKlGSekcj66ciE
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-