General
-
Target
3a07ae8d918baa159685c01ccbdccb2bea013853750077f65a5fe42899b88fb9.exe
-
Size
327KB
-
Sample
250117-evm44asnbl
-
MD5
79a6264afe124aa105ffe7a9dcf6e7a2
-
SHA1
3d05e68e1ab46578a4788969879a6a1cb972ca9b
-
SHA256
3a07ae8d918baa159685c01ccbdccb2bea013853750077f65a5fe42899b88fb9
-
SHA512
0e89d063035bd765162c487d2214190e4fae4190301cdaf0e131e4e2d941e90327bf3693d412f2338b4a6703c73b84788d3a86e97eee3897e9782c0229baabed
-
SSDEEP
6144:DX+psoWJ+IvLI7BziS3qoJGd2Gegu8JKSFGbJ+7+3LdfoPZmxMcVp0K:ymoWkI094og2GXfJKnbkS3LdAPZkiK
Static task
static1
Behavioral task
behavioral1
Sample
3a07ae8d918baa159685c01ccbdccb2bea013853750077f65a5fe42899b88fb9.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.226
218.54.31.165
Targets
-
-
Target
3a07ae8d918baa159685c01ccbdccb2bea013853750077f65a5fe42899b88fb9.exe
-
Size
327KB
-
MD5
79a6264afe124aa105ffe7a9dcf6e7a2
-
SHA1
3d05e68e1ab46578a4788969879a6a1cb972ca9b
-
SHA256
3a07ae8d918baa159685c01ccbdccb2bea013853750077f65a5fe42899b88fb9
-
SHA512
0e89d063035bd765162c487d2214190e4fae4190301cdaf0e131e4e2d941e90327bf3693d412f2338b4a6703c73b84788d3a86e97eee3897e9782c0229baabed
-
SSDEEP
6144:DX+psoWJ+IvLI7BziS3qoJGd2Gegu8JKSFGbJ+7+3LdfoPZmxMcVp0K:ymoWkI094og2GXfJKnbkS3LdAPZkiK
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-