General
-
Target
a0985dbdf194333943cce036e8da51c0bba1279706db7a6027a8dce00d08cdff
-
Size
58KB
-
Sample
250118-hzm7fawnds
-
MD5
65cd9e85d0e2ab0347379aa7c18c3c9a
-
SHA1
a5150729b372d037a52fc3e7c4c30ffdd6747f26
-
SHA256
a0985dbdf194333943cce036e8da51c0bba1279706db7a6027a8dce00d08cdff
-
SHA512
9df8eaa6b29d9ada94f2667a0f73bb956e9118ca00fb21670bba257cee2de34059346dfd3fecd147fbfe72fceec2a8ae35827e096da800fd17dc51b1ed21b16a
-
SSDEEP
1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8NT:MOemdTd1o74qlmbbJ+x+Ikb
Static task
static1
Behavioral task
behavioral1
Sample
a0985dbdf194333943cce036e8da51c0bba1279706db7a6027a8dce00d08cdff.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
a0985dbdf194333943cce036e8da51c0bba1279706db7a6027a8dce00d08cdff
-
Size
58KB
-
MD5
65cd9e85d0e2ab0347379aa7c18c3c9a
-
SHA1
a5150729b372d037a52fc3e7c4c30ffdd6747f26
-
SHA256
a0985dbdf194333943cce036e8da51c0bba1279706db7a6027a8dce00d08cdff
-
SHA512
9df8eaa6b29d9ada94f2667a0f73bb956e9118ca00fb21670bba257cee2de34059346dfd3fecd147fbfe72fceec2a8ae35827e096da800fd17dc51b1ed21b16a
-
SSDEEP
1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8NT:MOemdTd1o74qlmbbJ+x+Ikb
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-