General
-
Target
bca240552a66cb7cc3f33b2b866746372ce9d41ad3cc69fc963d39ed0a308904.exe
-
Size
337KB
-
Sample
250122-vg9c6swldx
-
MD5
5ce7a119af90e0558ac742b7ff225c75
-
SHA1
25c01e283782c843a1600e626960d968aead0a70
-
SHA256
bca240552a66cb7cc3f33b2b866746372ce9d41ad3cc69fc963d39ed0a308904
-
SHA512
5da612dbe40bbb694ea1831a885dc7ad5a21f2f0ffa60b5bf0b026ed9db66eb8f0dac22a0c5c0a9a0ee0e39759bccdd66b8d925282f94c259564f4c29c5d1874
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcV7:vHW138/iXWlK885rKlGSekcj66ciw
Static task
static1
Behavioral task
behavioral1
Sample
bca240552a66cb7cc3f33b2b866746372ce9d41ad3cc69fc963d39ed0a308904.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
bca240552a66cb7cc3f33b2b866746372ce9d41ad3cc69fc963d39ed0a308904.exe
-
Size
337KB
-
MD5
5ce7a119af90e0558ac742b7ff225c75
-
SHA1
25c01e283782c843a1600e626960d968aead0a70
-
SHA256
bca240552a66cb7cc3f33b2b866746372ce9d41ad3cc69fc963d39ed0a308904
-
SHA512
5da612dbe40bbb694ea1831a885dc7ad5a21f2f0ffa60b5bf0b026ed9db66eb8f0dac22a0c5c0a9a0ee0e39759bccdd66b8d925282f94c259564f4c29c5d1874
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcV7:vHW138/iXWlK885rKlGSekcj66ciw
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-