General
-
Target
e3a723409fef14d7a96250abd8c400fb14fcfe1f10f4464345b87af80fe46514N.exe
-
Size
92KB
-
Sample
250121-m4kz4azng1
-
MD5
e113be73397c63bf54b01380cf015440
-
SHA1
3e374d771a89ca2922489f9547e0d035695b0407
-
SHA256
e3a723409fef14d7a96250abd8c400fb14fcfe1f10f4464345b87af80fe46514
-
SHA512
2e739119c5aee3d8e08abff71104895fd58f2ab601c2dff865f2f0e21fcf79d268a601757f530653efd021b1e59720484d2c895374d7d746a392e506ebd3685a
-
SSDEEP
1536:iDJj/L6UWX/iDdolO4g033dsA2+n1qn1iLdp/:iDJj29G4gItR7n1qn4Ldp
Static task
static1
Behavioral task
behavioral1
Sample
e3a723409fef14d7a96250abd8c400fb14fcfe1f10f4464345b87af80fe46514N.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.47.77
218.54.47.74
Targets
-
-
Target
e3a723409fef14d7a96250abd8c400fb14fcfe1f10f4464345b87af80fe46514N.exe
-
Size
92KB
-
MD5
e113be73397c63bf54b01380cf015440
-
SHA1
3e374d771a89ca2922489f9547e0d035695b0407
-
SHA256
e3a723409fef14d7a96250abd8c400fb14fcfe1f10f4464345b87af80fe46514
-
SHA512
2e739119c5aee3d8e08abff71104895fd58f2ab601c2dff865f2f0e21fcf79d268a601757f530653efd021b1e59720484d2c895374d7d746a392e506ebd3685a
-
SSDEEP
1536:iDJj/L6UWX/iDdolO4g033dsA2+n1qn1iLdp/:iDJj29G4gItR7n1qn4Ldp
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-