General
-
Target
054783035cbfa181bdaf3da8fb9cc69704662dedad83519fe111d102440cc522
-
Size
506KB
-
Sample
250118-xzvzlssnhn
-
MD5
abebef90eeaca5e12766b4b318c379a2
-
SHA1
614d5dbf8251213c64072690449fb18b91e2cf52
-
SHA256
054783035cbfa181bdaf3da8fb9cc69704662dedad83519fe111d102440cc522
-
SHA512
da2da22f747c00f0e6d6c2cb9f604576455ae7c6be72010b51d8400d2702a05eb08f1499f0231c6ea0d557b54557bd8178e948abd381a162219d0dc30c65d1f3
-
SSDEEP
12288:ndBNKTCqqwXCcdgT89+MvA+BisqYpxHtp:nLjQC+fs0j
Behavioral task
behavioral1
Sample
054783035cbfa181bdaf3da8fb9cc69704662dedad83519fe111d102440cc522.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.226
218.54.31.165
Targets
-
-
Target
054783035cbfa181bdaf3da8fb9cc69704662dedad83519fe111d102440cc522
-
Size
506KB
-
MD5
abebef90eeaca5e12766b4b318c379a2
-
SHA1
614d5dbf8251213c64072690449fb18b91e2cf52
-
SHA256
054783035cbfa181bdaf3da8fb9cc69704662dedad83519fe111d102440cc522
-
SHA512
da2da22f747c00f0e6d6c2cb9f604576455ae7c6be72010b51d8400d2702a05eb08f1499f0231c6ea0d557b54557bd8178e948abd381a162219d0dc30c65d1f3
-
SSDEEP
12288:ndBNKTCqqwXCcdgT89+MvA+BisqYpxHtp:nLjQC+fs0j
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-