General
-
Target
7a59610bcc3e1c589ce52cd897f831edb773a663b45580caf0ecffc1ee83967d
-
Size
336KB
-
Sample
250120-fqr3xssqhn
-
MD5
7ec7de4e9a57cb8de75c702a35e702c6
-
SHA1
634f1f6c6db3418043a31b99f935e5443f3cef2d
-
SHA256
7a59610bcc3e1c589ce52cd897f831edb773a663b45580caf0ecffc1ee83967d
-
SHA512
386b747b5cbe93e99a2aeefff6bb47496d771da1c9998872ebbcf243cb9ffd604051860f2426d866f461af243fc2cd74c57a37b512307a800c1f5e121df0517a
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcKoZ:vHW138/iXWlK885rKlGSekcj66ciU
Static task
static1
Behavioral task
behavioral1
Sample
7a59610bcc3e1c589ce52cd897f831edb773a663b45580caf0ecffc1ee83967d.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
7a59610bcc3e1c589ce52cd897f831edb773a663b45580caf0ecffc1ee83967d
-
Size
336KB
-
MD5
7ec7de4e9a57cb8de75c702a35e702c6
-
SHA1
634f1f6c6db3418043a31b99f935e5443f3cef2d
-
SHA256
7a59610bcc3e1c589ce52cd897f831edb773a663b45580caf0ecffc1ee83967d
-
SHA512
386b747b5cbe93e99a2aeefff6bb47496d771da1c9998872ebbcf243cb9ffd604051860f2426d866f461af243fc2cd74c57a37b512307a800c1f5e121df0517a
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcKoZ:vHW138/iXWlK885rKlGSekcj66ciU
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-