General
-
Target
42a51a26f5d4e9959db0b228fe7a17247f8572902056814d7fc09e93229bf098.exe
-
Size
59KB
-
Sample
250124-s1ddqswrfq
-
MD5
36f26fcaae5cf8d3aa97fe7cf9f0b633
-
SHA1
d80e1ac4b25d6e1ea8b961fd5f2ec8438356bfef
-
SHA256
42a51a26f5d4e9959db0b228fe7a17247f8572902056814d7fc09e93229bf098
-
SHA512
f88cff7f310671a9f6efd3047b9652918cafa3d2923a067c574c15f3d753e42951f9870d8f4a9216354a29096acd01bcc27568a16fc882a92de7b90426afbda5
-
SSDEEP
768:jb4zb59Yix/RoyH+5flZirYqc97vFvrpaZG3DHvTdA9GgnOuS5Z3WXcKIZx5uDZ:jbQx5oPsr2vFxDPhAvzgdWLIZ7yZ
Static task
static1
Behavioral task
behavioral1
Sample
42a51a26f5d4e9959db0b228fe7a17247f8572902056814d7fc09e93229bf098.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
42a51a26f5d4e9959db0b228fe7a17247f8572902056814d7fc09e93229bf098.exe
-
Size
59KB
-
MD5
36f26fcaae5cf8d3aa97fe7cf9f0b633
-
SHA1
d80e1ac4b25d6e1ea8b961fd5f2ec8438356bfef
-
SHA256
42a51a26f5d4e9959db0b228fe7a17247f8572902056814d7fc09e93229bf098
-
SHA512
f88cff7f310671a9f6efd3047b9652918cafa3d2923a067c574c15f3d753e42951f9870d8f4a9216354a29096acd01bcc27568a16fc882a92de7b90426afbda5
-
SSDEEP
768:jb4zb59Yix/RoyH+5flZirYqc97vFvrpaZG3DHvTdA9GgnOuS5Z3WXcKIZx5uDZ:jbQx5oPsr2vFxDPhAvzgdWLIZ7yZ
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-