General
-
Target
200e33e4c1a9b371c66ddbb036b92279e3ed2f65e81752c9b4e29a471c16bb42N.exe
-
Size
59KB
-
Sample
250119-zt1c9awjf1
-
MD5
70cd4a5c55eba9390954b36f80804930
-
SHA1
aed798f1974309adccb7a022d5614a835977ee86
-
SHA256
200e33e4c1a9b371c66ddbb036b92279e3ed2f65e81752c9b4e29a471c16bb42
-
SHA512
ed22cdb09c3e1a6bbd118345fd8d34e0dbe27435b26d74ca16fce6018c8081cd4e73155de0801747caccf17fced8f065ff96cb52cc0819676aeb042911ce8620
-
SSDEEP
768:jb4zb59Yix/RoyH+5flZirYqc97vFvrpaZG3DHvTdA9GgnOuS5Z3WXcKIZx5uDt:jbQx5oPsr2vFxDPhAvzgdWLIZ7yt
Static task
static1
Behavioral task
behavioral1
Sample
200e33e4c1a9b371c66ddbb036b92279e3ed2f65e81752c9b4e29a471c16bb42N.exe
Resource
win7-20241023-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
200e33e4c1a9b371c66ddbb036b92279e3ed2f65e81752c9b4e29a471c16bb42N.exe
-
Size
59KB
-
MD5
70cd4a5c55eba9390954b36f80804930
-
SHA1
aed798f1974309adccb7a022d5614a835977ee86
-
SHA256
200e33e4c1a9b371c66ddbb036b92279e3ed2f65e81752c9b4e29a471c16bb42
-
SHA512
ed22cdb09c3e1a6bbd118345fd8d34e0dbe27435b26d74ca16fce6018c8081cd4e73155de0801747caccf17fced8f065ff96cb52cc0819676aeb042911ce8620
-
SSDEEP
768:jb4zb59Yix/RoyH+5flZirYqc97vFvrpaZG3DHvTdA9GgnOuS5Z3WXcKIZx5uDt:jbQx5oPsr2vFxDPhAvzgdWLIZ7yt
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-