General
-
Target
6f407a007e4a5a3349bed1e35d790ebaaae96983b4912067064aae7d9093998f
-
Size
53KB
-
Sample
250123-chx3eswrbv
-
MD5
9ff5325f706743a564ffa29a221e29a8
-
SHA1
4e3451474147aa6fac0b6a263df48be51d6d78e0
-
SHA256
6f407a007e4a5a3349bed1e35d790ebaaae96983b4912067064aae7d9093998f
-
SHA512
58c24d2b87d3a46b41cb7c417a0f9055c4b30f00d388238e209b2ff98e4ea093579ce76475261f044399e4dc2d2c0e9736f2ea2d3db8c39049dd16688961dba6
-
SSDEEP
1536:vMcQYte55zs091Zw9FAGDdJYipvwGf9ogjrgEXK:vMhAe5Zs091KI+JYixw49XjrA
Static task
static1
Behavioral task
behavioral1
Sample
6f407a007e4a5a3349bed1e35d790ebaaae96983b4912067064aae7d9093998f.exe
Resource
win7-20241023-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
6f407a007e4a5a3349bed1e35d790ebaaae96983b4912067064aae7d9093998f
-
Size
53KB
-
MD5
9ff5325f706743a564ffa29a221e29a8
-
SHA1
4e3451474147aa6fac0b6a263df48be51d6d78e0
-
SHA256
6f407a007e4a5a3349bed1e35d790ebaaae96983b4912067064aae7d9093998f
-
SHA512
58c24d2b87d3a46b41cb7c417a0f9055c4b30f00d388238e209b2ff98e4ea093579ce76475261f044399e4dc2d2c0e9736f2ea2d3db8c39049dd16688961dba6
-
SSDEEP
1536:vMcQYte55zs091Zw9FAGDdJYipvwGf9ogjrgEXK:vMhAe5Zs091KI+JYixw49XjrA
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-