General
-
Target
05d75993b757055e5ad8bc8a99776341f7bc2f5a8083446c04035bc8b24f971dN.exe
-
Size
92KB
-
Sample
250121-njm5ds1qbr
-
MD5
d4432d51d185f01b1080e01fdb23d1d0
-
SHA1
ced05141c319b560a2394ea78cd391fcaacf1f63
-
SHA256
05d75993b757055e5ad8bc8a99776341f7bc2f5a8083446c04035bc8b24f971d
-
SHA512
328a18b8451b806065f337055ed0da923cdf00065d24f312620bfa6a0bf60697295b5402edb4701570155506430d8afa24a60c6490c4063e41784e177fb27494
-
SSDEEP
768:2geZ5QeklJQ35pPRuIkUD1sYAQ/TN71N1adOZSHj9jaSCpOzIi7D8kUUUNUEwDj:heZqP25TuIfmS7Fv1aUZSD9yiIHaX
Static task
static1
Behavioral task
behavioral1
Sample
05d75993b757055e5ad8bc8a99776341f7bc2f5a8083446c04035bc8b24f971dN.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.28.139
121.88.5.183
Targets
-
-
Target
05d75993b757055e5ad8bc8a99776341f7bc2f5a8083446c04035bc8b24f971dN.exe
-
Size
92KB
-
MD5
d4432d51d185f01b1080e01fdb23d1d0
-
SHA1
ced05141c319b560a2394ea78cd391fcaacf1f63
-
SHA256
05d75993b757055e5ad8bc8a99776341f7bc2f5a8083446c04035bc8b24f971d
-
SHA512
328a18b8451b806065f337055ed0da923cdf00065d24f312620bfa6a0bf60697295b5402edb4701570155506430d8afa24a60c6490c4063e41784e177fb27494
-
SSDEEP
768:2geZ5QeklJQ35pPRuIkUD1sYAQ/TN71N1adOZSHj9jaSCpOzIi7D8kUUUNUEwDj:heZqP25TuIfmS7Fv1aUZSD9yiIHaX
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-