General
-
Target
9d823261ae50a05dd8e077ce05fd7b4b7b0ad13bd80d635fff1aa3b84a1cc5f8N.exe
-
Size
57KB
-
Sample
250121-mxd8zazlcs
-
MD5
9efa52605ac53b7ca2697c1592885300
-
SHA1
0292c3495e4f9131f170fc4a8f239d33b22b7788
-
SHA256
9d823261ae50a05dd8e077ce05fd7b4b7b0ad13bd80d635fff1aa3b84a1cc5f8
-
SHA512
740059f1c76b5955b0d2b594104d44228775198dbf26afe70f7715237eb13a87597f99de08b868486a5c6513c391c96315ade523bbeefb506dcb39781abbfdd9
-
SSDEEP
1536:amZ+4hcuX5uZ79jmvFQTXnz9yQ/PFBhl1C:amZ+luXwy2f9LDhDC
Static task
static1
Behavioral task
behavioral1
Sample
9d823261ae50a05dd8e077ce05fd7b4b7b0ad13bd80d635fff1aa3b84a1cc5f8N.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
9d823261ae50a05dd8e077ce05fd7b4b7b0ad13bd80d635fff1aa3b84a1cc5f8N.exe
-
Size
57KB
-
MD5
9efa52605ac53b7ca2697c1592885300
-
SHA1
0292c3495e4f9131f170fc4a8f239d33b22b7788
-
SHA256
9d823261ae50a05dd8e077ce05fd7b4b7b0ad13bd80d635fff1aa3b84a1cc5f8
-
SHA512
740059f1c76b5955b0d2b594104d44228775198dbf26afe70f7715237eb13a87597f99de08b868486a5c6513c391c96315ade523bbeefb506dcb39781abbfdd9
-
SSDEEP
1536:amZ+4hcuX5uZ79jmvFQTXnz9yQ/PFBhl1C:amZ+luXwy2f9LDhDC
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-