General
-
Target
f529eed2bdfa7c81bbe6a9131721e0f7640b852325f959df9768e827e1e7198c.exe
-
Size
81KB
-
Sample
250120-vxqwrszqey
-
MD5
13f83fd3ed9baedc5ab4bf7923e82273
-
SHA1
42cb58fb0210572f92e0b6c13fb9c276cce1ae68
-
SHA256
f529eed2bdfa7c81bbe6a9131721e0f7640b852325f959df9768e827e1e7198c
-
SHA512
a0b270b89b82583101b8583cf0b97dfb7e2639af8491733ba326d1166783702d29ec4b12e32ad23cd9deee7674dbc7f3466f20c5a793565ceadcd5ef2ec701f5
-
SSDEEP
1536:UOzC0tKyIy9nOM8e5rqYJkdpzCEw2dnU4qv8P:UO9Ro2rqYyXzCEwGf
Static task
static1
Behavioral task
behavioral1
Sample
f529eed2bdfa7c81bbe6a9131721e0f7640b852325f959df9768e827e1e7198c.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
112.175.88.207
112.175.88.208
Targets
-
-
Target
f529eed2bdfa7c81bbe6a9131721e0f7640b852325f959df9768e827e1e7198c.exe
-
Size
81KB
-
MD5
13f83fd3ed9baedc5ab4bf7923e82273
-
SHA1
42cb58fb0210572f92e0b6c13fb9c276cce1ae68
-
SHA256
f529eed2bdfa7c81bbe6a9131721e0f7640b852325f959df9768e827e1e7198c
-
SHA512
a0b270b89b82583101b8583cf0b97dfb7e2639af8491733ba326d1166783702d29ec4b12e32ad23cd9deee7674dbc7f3466f20c5a793565ceadcd5ef2ec701f5
-
SSDEEP
1536:UOzC0tKyIy9nOM8e5rqYJkdpzCEw2dnU4qv8P:UO9Ro2rqYyXzCEwGf
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-