General
-
Target
653e5c630d326fb3e5881ac6887c1b382d76afe32e7445688793746edc3977ce.exe
-
Size
93KB
-
Sample
250124-g4dm5atres
-
MD5
9ad3c3f8b3ea9acc79311422bb59d2da
-
SHA1
97f19c8de3bae716769a8c5a4943df974b578b6d
-
SHA256
653e5c630d326fb3e5881ac6887c1b382d76afe32e7445688793746edc3977ce
-
SHA512
08fa0bb96d4e0bec84704b557323d19bd49db12aadf522c63ad2d5e2d8f5f94bd5ea248ad8fd36c2485892f535fdb8bb64b05168426953eaff8a35ce7e07f1d0
-
SSDEEP
1536:iDJj/L6UWX/iDdolO4g033dsA2+n1qn1iLdB6XC:iDJj29G4gItR7n1qn4LdoC
Static task
static1
Behavioral task
behavioral1
Sample
653e5c630d326fb3e5881ac6887c1b382d76afe32e7445688793746edc3977ce.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.47.77
218.54.47.74
Targets
-
-
Target
653e5c630d326fb3e5881ac6887c1b382d76afe32e7445688793746edc3977ce.exe
-
Size
93KB
-
MD5
9ad3c3f8b3ea9acc79311422bb59d2da
-
SHA1
97f19c8de3bae716769a8c5a4943df974b578b6d
-
SHA256
653e5c630d326fb3e5881ac6887c1b382d76afe32e7445688793746edc3977ce
-
SHA512
08fa0bb96d4e0bec84704b557323d19bd49db12aadf522c63ad2d5e2d8f5f94bd5ea248ad8fd36c2485892f535fdb8bb64b05168426953eaff8a35ce7e07f1d0
-
SSDEEP
1536:iDJj/L6UWX/iDdolO4g033dsA2+n1qn1iLdB6XC:iDJj29G4gItR7n1qn4LdoC
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-