General
-
Target
dc777e7ef05d8a6f162fdf5240cbc4e20d46fcb86632636e7c5f108be019e3b4N.exe
-
Size
337KB
-
Sample
250127-bv78gstmav
-
MD5
2ce6c45531d66440c0c8d873ea9fee60
-
SHA1
d1807d51421c176e6b59c7e401ccbf10e488fa7e
-
SHA256
dc777e7ef05d8a6f162fdf5240cbc4e20d46fcb86632636e7c5f108be019e3b4
-
SHA512
583805c1320b19ca44ba4e496d3ba068a0dc7a412f96a270d4a80d7a33b49040b03d8ca3065bdc8649f166d686fc54c07aa8a4238cc1dccf78ecd5bbd2a05c54
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcKoa:vHW138/iXWlK885rKlGSekcj66ciP
Static task
static1
Behavioral task
behavioral1
Sample
dc777e7ef05d8a6f162fdf5240cbc4e20d46fcb86632636e7c5f108be019e3b4N.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
dc777e7ef05d8a6f162fdf5240cbc4e20d46fcb86632636e7c5f108be019e3b4N.exe
-
Size
337KB
-
MD5
2ce6c45531d66440c0c8d873ea9fee60
-
SHA1
d1807d51421c176e6b59c7e401ccbf10e488fa7e
-
SHA256
dc777e7ef05d8a6f162fdf5240cbc4e20d46fcb86632636e7c5f108be019e3b4
-
SHA512
583805c1320b19ca44ba4e496d3ba068a0dc7a412f96a270d4a80d7a33b49040b03d8ca3065bdc8649f166d686fc54c07aa8a4238cc1dccf78ecd5bbd2a05c54
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcKoa:vHW138/iXWlK885rKlGSekcj66ciP
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-