General
-
Target
1e8bc4c25071312e00e5480469700b34e8c661ff860aee6cb228c35507f6ddefN.exe
-
Size
336KB
-
Sample
250124-px1hbayndw
-
MD5
63112463c8d44d312cded96e7f033800
-
SHA1
f48c48882f0d5348f6e99a27599efbaf5e80d9e1
-
SHA256
1e8bc4c25071312e00e5480469700b34e8c661ff860aee6cb228c35507f6ddef
-
SHA512
f514ec1c8070105d5cfdc38249bec80689d18405004e55b8431c3eec1c52c1e5bd4ff7a94d109b15b66c30765c442f9442a6cfcf857830d7f2275086edc7e309
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIrE:vHW138/iXWlK885rKlGSekcj66ci+
Static task
static1
Behavioral task
behavioral1
Sample
1e8bc4c25071312e00e5480469700b34e8c661ff860aee6cb228c35507f6ddefN.exe
Resource
win7-20240729-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
1e8bc4c25071312e00e5480469700b34e8c661ff860aee6cb228c35507f6ddefN.exe
-
Size
336KB
-
MD5
63112463c8d44d312cded96e7f033800
-
SHA1
f48c48882f0d5348f6e99a27599efbaf5e80d9e1
-
SHA256
1e8bc4c25071312e00e5480469700b34e8c661ff860aee6cb228c35507f6ddef
-
SHA512
f514ec1c8070105d5cfdc38249bec80689d18405004e55b8431c3eec1c52c1e5bd4ff7a94d109b15b66c30765c442f9442a6cfcf857830d7f2275086edc7e309
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIrE:vHW138/iXWlK885rKlGSekcj66ci+
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-