General
-
Target
09d0706acfd7a5ecaca5bd7301b4d9e6d38ec911718332b690c7fa881d3f7319N.exe
-
Size
92KB
-
Sample
250124-fr516ssnfm
-
MD5
952f9dce75e7497dd22af53f225728f0
-
SHA1
9619bc7e90c71bf0978a64d4fe17b164526adb40
-
SHA256
09d0706acfd7a5ecaca5bd7301b4d9e6d38ec911718332b690c7fa881d3f7319
-
SHA512
0405653450806eb6c12f7cc667370cd61bd33441f7989314bba71f3efaac8ac6c829ce98170aba48fa291bdbc69785d0ffb12d6d0dbd913fee41c39e96ae7d51
-
SSDEEP
1536:iDJj/L6UWX/iDdolO4g033dsA2+n1qn1iLdB:iDJj29G4gItR7n1qn4Ld
Static task
static1
Behavioral task
behavioral1
Sample
09d0706acfd7a5ecaca5bd7301b4d9e6d38ec911718332b690c7fa881d3f7319N.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.77
218.54.47.74
Targets
-
-
Target
09d0706acfd7a5ecaca5bd7301b4d9e6d38ec911718332b690c7fa881d3f7319N.exe
-
Size
92KB
-
MD5
952f9dce75e7497dd22af53f225728f0
-
SHA1
9619bc7e90c71bf0978a64d4fe17b164526adb40
-
SHA256
09d0706acfd7a5ecaca5bd7301b4d9e6d38ec911718332b690c7fa881d3f7319
-
SHA512
0405653450806eb6c12f7cc667370cd61bd33441f7989314bba71f3efaac8ac6c829ce98170aba48fa291bdbc69785d0ffb12d6d0dbd913fee41c39e96ae7d51
-
SSDEEP
1536:iDJj/L6UWX/iDdolO4g033dsA2+n1qn1iLdB:iDJj29G4gItR7n1qn4Ld
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-