General
-
Target
59728919700593b0d3448a4efaf3356da0d57e085ab9bdc0142bfaf707ec80d7N.exe
-
Size
76KB
-
Sample
250122-lb278syrdt
-
MD5
f2bc391f02e9589972e233b10db8e9a0
-
SHA1
d4c7c8909e6e107d6b81a5fa006e90962843e511
-
SHA256
59728919700593b0d3448a4efaf3356da0d57e085ab9bdc0142bfaf707ec80d7
-
SHA512
02e062a9172a1fd4a5755a5c5183b7c6f59e8761977ae1652f4a27bb0a5f46750f41b3384acb6e843da792f18ea05da0f393e18e6808d9d7d3e48fc31a9ba2d4
-
SSDEEP
1536:+Uk8RgDXz7Kx8zzgmTlvtKrNCpbXmsz4tHITZ:Tk8yn7KdmTINQXzz46
Static task
static1
Behavioral task
behavioral1
Sample
59728919700593b0d3448a4efaf3356da0d57e085ab9bdc0142bfaf707ec80d7N.exe
Resource
win7-20241023-en
Malware Config
Extracted
urelas
112.175.88.207
112.175.88.208
Targets
-
-
Target
59728919700593b0d3448a4efaf3356da0d57e085ab9bdc0142bfaf707ec80d7N.exe
-
Size
76KB
-
MD5
f2bc391f02e9589972e233b10db8e9a0
-
SHA1
d4c7c8909e6e107d6b81a5fa006e90962843e511
-
SHA256
59728919700593b0d3448a4efaf3356da0d57e085ab9bdc0142bfaf707ec80d7
-
SHA512
02e062a9172a1fd4a5755a5c5183b7c6f59e8761977ae1652f4a27bb0a5f46750f41b3384acb6e843da792f18ea05da0f393e18e6808d9d7d3e48fc31a9ba2d4
-
SSDEEP
1536:+Uk8RgDXz7Kx8zzgmTlvtKrNCpbXmsz4tHITZ:Tk8yn7KdmTINQXzz46
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-