General
-
Target
29cf49ad638ecc9b68f666d9bb137ecca659c483b06592411e40056c82e7d756
-
Size
336KB
-
Sample
250119-2a2s3syraj
-
MD5
8b5d4040699ab941751630006a22ed61
-
SHA1
f57aff4ee41ad39e34df68f759c220a55e9bc1d1
-
SHA256
29cf49ad638ecc9b68f666d9bb137ecca659c483b06592411e40056c82e7d756
-
SHA512
a7e98068b11c42f6a54a24b315a4aa471b87f6cc402530953a0359cdf40d613467b26cf41952f83dcc8902d203b86542e0731c68e98dbc385d76fa0e90445e76
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcEg:vHW138/iXWlK885rKlGSekcj66cis
Static task
static1
Behavioral task
behavioral1
Sample
29cf49ad638ecc9b68f666d9bb137ecca659c483b06592411e40056c82e7d756.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
29cf49ad638ecc9b68f666d9bb137ecca659c483b06592411e40056c82e7d756
-
Size
336KB
-
MD5
8b5d4040699ab941751630006a22ed61
-
SHA1
f57aff4ee41ad39e34df68f759c220a55e9bc1d1
-
SHA256
29cf49ad638ecc9b68f666d9bb137ecca659c483b06592411e40056c82e7d756
-
SHA512
a7e98068b11c42f6a54a24b315a4aa471b87f6cc402530953a0359cdf40d613467b26cf41952f83dcc8902d203b86542e0731c68e98dbc385d76fa0e90445e76
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcEg:vHW138/iXWlK885rKlGSekcj66cis
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-