General
-
Target
106a93d92afba2835a8d35b6b8477dc618e300a552dec4e12c6edc34794280b0.exe
-
Size
336KB
-
Sample
250122-eadpxsxkgq
-
MD5
184521dc985f9347420decd07ebb3d1a
-
SHA1
a97891c7a46cc0cc8e88a8d60ef4c7b91044d136
-
SHA256
106a93d92afba2835a8d35b6b8477dc618e300a552dec4e12c6edc34794280b0
-
SHA512
0c5b90441faf0057e8016f6dc696acd7860eb0cf7884f110299cf7727a249588a5cf7bbb76c2633113521acc71956e449eb07cf8cc52f54eae5831d4537a9d93
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcKv:vHW138/iXWlK885rKlGSekcj66ci3
Static task
static1
Behavioral task
behavioral1
Sample
106a93d92afba2835a8d35b6b8477dc618e300a552dec4e12c6edc34794280b0.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
106a93d92afba2835a8d35b6b8477dc618e300a552dec4e12c6edc34794280b0.exe
-
Size
336KB
-
MD5
184521dc985f9347420decd07ebb3d1a
-
SHA1
a97891c7a46cc0cc8e88a8d60ef4c7b91044d136
-
SHA256
106a93d92afba2835a8d35b6b8477dc618e300a552dec4e12c6edc34794280b0
-
SHA512
0c5b90441faf0057e8016f6dc696acd7860eb0cf7884f110299cf7727a249588a5cf7bbb76c2633113521acc71956e449eb07cf8cc52f54eae5831d4537a9d93
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcKv:vHW138/iXWlK885rKlGSekcj66ci3
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-