General
-
Target
9948f02275c698e07317fdc1fd1075964a0130a193e75240fdb5162bde4c5927N.exe
-
Size
68KB
-
Sample
250117-sac1aasmct
-
MD5
937a04ad0c41c263a0193a644a2f3040
-
SHA1
763510fd2dbe3540b2a02d18d6665c0f0a0a17e0
-
SHA256
9948f02275c698e07317fdc1fd1075964a0130a193e75240fdb5162bde4c5927
-
SHA512
d18cd8a0764fd2ebaee1d814b020008fc214d14fb0b2806259dfd87007da69c1f28a39340ff1e2edd79c2dfa740a458008088a563e9a436607fbef1b8d83fd39
-
SSDEEP
1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCar8:yLAYUzmdD0sMQl7d7IuhCao
Static task
static1
Behavioral task
behavioral1
Sample
9948f02275c698e07317fdc1fd1075964a0130a193e75240fdb5162bde4c5927N.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
9948f02275c698e07317fdc1fd1075964a0130a193e75240fdb5162bde4c5927N.exe
-
Size
68KB
-
MD5
937a04ad0c41c263a0193a644a2f3040
-
SHA1
763510fd2dbe3540b2a02d18d6665c0f0a0a17e0
-
SHA256
9948f02275c698e07317fdc1fd1075964a0130a193e75240fdb5162bde4c5927
-
SHA512
d18cd8a0764fd2ebaee1d814b020008fc214d14fb0b2806259dfd87007da69c1f28a39340ff1e2edd79c2dfa740a458008088a563e9a436607fbef1b8d83fd39
-
SSDEEP
1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCar8:yLAYUzmdD0sMQl7d7IuhCao
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-