General
-
Target
ac79def9400e9b3ed7d17647fd2eb46cf25d2008a679a84294432f3365a68173
-
Size
77KB
-
Sample
250125-fd2rlawnhx
-
MD5
5f7079f7d1929930a355dd4f26f0bcb1
-
SHA1
e8c4c77c47d3cf184b85ebb8e3f2870d2a932667
-
SHA256
ac79def9400e9b3ed7d17647fd2eb46cf25d2008a679a84294432f3365a68173
-
SHA512
9df88674e32ac33e325e5ec6d7a578566d2041c9e2fb2a439abf4a43a18dff45f6bf9c04805344f6b0dff24dfda11a6110d95310154a08b2bd06aef336983493
-
SSDEEP
1536:PL2hIZA4fFfgK6xwHquw63wIl3eCEwWsg1p:PLnFYZx7CeCEwre
Static task
static1
Behavioral task
behavioral1
Sample
ac79def9400e9b3ed7d17647fd2eb46cf25d2008a679a84294432f3365a68173.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
112.175.88.207
112.175.88.208
Targets
-
-
Target
ac79def9400e9b3ed7d17647fd2eb46cf25d2008a679a84294432f3365a68173
-
Size
77KB
-
MD5
5f7079f7d1929930a355dd4f26f0bcb1
-
SHA1
e8c4c77c47d3cf184b85ebb8e3f2870d2a932667
-
SHA256
ac79def9400e9b3ed7d17647fd2eb46cf25d2008a679a84294432f3365a68173
-
SHA512
9df88674e32ac33e325e5ec6d7a578566d2041c9e2fb2a439abf4a43a18dff45f6bf9c04805344f6b0dff24dfda11a6110d95310154a08b2bd06aef336983493
-
SSDEEP
1536:PL2hIZA4fFfgK6xwHquw63wIl3eCEwWsg1p:PLnFYZx7CeCEwre
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-