General
-
Target
c4b0da97081bbd6b38a6846a2c1ec11053284f4a0c9f60221162504de3805a41N.exe
-
Size
393KB
-
Sample
250124-q15f4ssper
-
MD5
baf1c83a71668c7062697d1932dc9600
-
SHA1
e8e847248336c84713dd50effb6c8c38d74edacf
-
SHA256
c4b0da97081bbd6b38a6846a2c1ec11053284f4a0c9f60221162504de3805a41
-
SHA512
b012ee52a44e6398ea65605345a22cfca7d8b2fa9dcd527e58c970e620f268367f46ee9f7a1cba46cfdf21739887534d3943e605de3548145ca397d42f046a6a
-
SSDEEP
6144:y5SXvBoDWoyLYyzbpPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrB2:yIfBoDWoyFboU6hAJQnr2
Behavioral task
behavioral1
Sample
c4b0da97081bbd6b38a6846a2c1ec11053284f4a0c9f60221162504de3805a41N.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
c4b0da97081bbd6b38a6846a2c1ec11053284f4a0c9f60221162504de3805a41N.exe
-
Size
393KB
-
MD5
baf1c83a71668c7062697d1932dc9600
-
SHA1
e8e847248336c84713dd50effb6c8c38d74edacf
-
SHA256
c4b0da97081bbd6b38a6846a2c1ec11053284f4a0c9f60221162504de3805a41
-
SHA512
b012ee52a44e6398ea65605345a22cfca7d8b2fa9dcd527e58c970e620f268367f46ee9f7a1cba46cfdf21739887534d3943e605de3548145ca397d42f046a6a
-
SSDEEP
6144:y5SXvBoDWoyLYyzbpPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrB2:yIfBoDWoyFboU6hAJQnr2
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-