General
-
Target
c54bde19a8f05f8f5a4914f30df8c1f6bf9e3d6ca01804ad3a52ac02ca69160f.exe
-
Size
68KB
-
Sample
250122-pak44svrax
-
MD5
6dfe25a15012dbd95fbc45ec80f7b975
-
SHA1
92f370c5832610a2de6028af204c1b65ca14efee
-
SHA256
c54bde19a8f05f8f5a4914f30df8c1f6bf9e3d6ca01804ad3a52ac02ca69160f
-
SHA512
a5acdf162d7a3d0dba545cb44d701e551bc4f9f8530b924b85b55882cff58136e9cbe48899236a04bb177dc0bfbaa8f7bb87b7e40af458f7ea00a25288202ed4
-
SSDEEP
1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCarH:yLAYUzmdD0sMQl7d7IuhCaD
Static task
static1
Behavioral task
behavioral1
Sample
c54bde19a8f05f8f5a4914f30df8c1f6bf9e3d6ca01804ad3a52ac02ca69160f.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
c54bde19a8f05f8f5a4914f30df8c1f6bf9e3d6ca01804ad3a52ac02ca69160f.exe
-
Size
68KB
-
MD5
6dfe25a15012dbd95fbc45ec80f7b975
-
SHA1
92f370c5832610a2de6028af204c1b65ca14efee
-
SHA256
c54bde19a8f05f8f5a4914f30df8c1f6bf9e3d6ca01804ad3a52ac02ca69160f
-
SHA512
a5acdf162d7a3d0dba545cb44d701e551bc4f9f8530b924b85b55882cff58136e9cbe48899236a04bb177dc0bfbaa8f7bb87b7e40af458f7ea00a25288202ed4
-
SSDEEP
1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCarH:yLAYUzmdD0sMQl7d7IuhCaD
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-