General
-
Target
0f15320b19b4f0b2acba03acaca9e2dde4a50b38efea2e49b07db1adb3c9ada2.exe
-
Size
52KB
-
Sample
250120-d34ldayqht
-
MD5
8df8b99ca2445206670b20c3dfbf79e5
-
SHA1
1e94b7402b9b96d8cb85493e667ebbcd64ffb808
-
SHA256
0f15320b19b4f0b2acba03acaca9e2dde4a50b38efea2e49b07db1adb3c9ada2
-
SHA512
73db794c0f8c98781e598aed46f55046551416f7a81244b7ad375eafa673975cd396a1468b1c2cd2173da2ef63b3e2816fc8a74902a1de11283abe07cf3d39d2
-
SSDEEP
1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhPCd:KsdXfBo/DBJBGzkP5PCd
Static task
static1
Behavioral task
behavioral1
Sample
0f15320b19b4f0b2acba03acaca9e2dde4a50b38efea2e49b07db1adb3c9ada2.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
121.88.5.183
218.54.28.139
Targets
-
-
Target
0f15320b19b4f0b2acba03acaca9e2dde4a50b38efea2e49b07db1adb3c9ada2.exe
-
Size
52KB
-
MD5
8df8b99ca2445206670b20c3dfbf79e5
-
SHA1
1e94b7402b9b96d8cb85493e667ebbcd64ffb808
-
SHA256
0f15320b19b4f0b2acba03acaca9e2dde4a50b38efea2e49b07db1adb3c9ada2
-
SHA512
73db794c0f8c98781e598aed46f55046551416f7a81244b7ad375eafa673975cd396a1468b1c2cd2173da2ef63b3e2816fc8a74902a1de11283abe07cf3d39d2
-
SSDEEP
1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhPCd:KsdXfBo/DBJBGzkP5PCd
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-