General
-
Target
1349c2e9afb18cd283d583d7a7b12be64fc8c50b777e88961c851ee535b7da60.exe
-
Size
337KB
-
Sample
250124-ee7tkayjcx
-
MD5
e6b76480839da7c11075198a296521db
-
SHA1
16ea461d8ccd09bda7f9535d24448bc46d897425
-
SHA256
1349c2e9afb18cd283d583d7a7b12be64fc8c50b777e88961c851ee535b7da60
-
SHA512
3f0a99d13b9a77f0570f45c9be72c0e52ae34101de65924ee6091e2df8238c1e9e433453569b17ed8caa142fb603c3c163574a9f19063b0793a56665dc4fc440
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcKCM:vHW138/iXWlK885rKlGSekcj66ciZ
Static task
static1
Behavioral task
behavioral1
Sample
1349c2e9afb18cd283d583d7a7b12be64fc8c50b777e88961c851ee535b7da60.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
1349c2e9afb18cd283d583d7a7b12be64fc8c50b777e88961c851ee535b7da60.exe
-
Size
337KB
-
MD5
e6b76480839da7c11075198a296521db
-
SHA1
16ea461d8ccd09bda7f9535d24448bc46d897425
-
SHA256
1349c2e9afb18cd283d583d7a7b12be64fc8c50b777e88961c851ee535b7da60
-
SHA512
3f0a99d13b9a77f0570f45c9be72c0e52ae34101de65924ee6091e2df8238c1e9e433453569b17ed8caa142fb603c3c163574a9f19063b0793a56665dc4fc440
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcKCM:vHW138/iXWlK885rKlGSekcj66ciZ
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-