General
-
Target
249cc26c7543eedd6b8ae8e55392de46208a94877903a49f2cdccf5f667e910a.exe
-
Size
338KB
-
Sample
250127-jpp4qazldk
-
MD5
8fb501ac698176feeaad15399c91510a
-
SHA1
9a014a3714a46134c2fd5671d2aea4a673a793b3
-
SHA256
249cc26c7543eedd6b8ae8e55392de46208a94877903a49f2cdccf5f667e910a
-
SHA512
1c0b3ccf41d2c39b8fb354379cf3fe00c652a1f79dd7bdaa563862d06a879ca66fbfe4334bf7c6ea5b4458f9b5f43068ddd7f096e9c1f7dc326a4e66c6017432
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcKogA:vHW138/iXWlK885rKlGSekcj66cis
Static task
static1
Behavioral task
behavioral1
Sample
249cc26c7543eedd6b8ae8e55392de46208a94877903a49f2cdccf5f667e910a.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
249cc26c7543eedd6b8ae8e55392de46208a94877903a49f2cdccf5f667e910a.exe
-
Size
338KB
-
MD5
8fb501ac698176feeaad15399c91510a
-
SHA1
9a014a3714a46134c2fd5671d2aea4a673a793b3
-
SHA256
249cc26c7543eedd6b8ae8e55392de46208a94877903a49f2cdccf5f667e910a
-
SHA512
1c0b3ccf41d2c39b8fb354379cf3fe00c652a1f79dd7bdaa563862d06a879ca66fbfe4334bf7c6ea5b4458f9b5f43068ddd7f096e9c1f7dc326a4e66c6017432
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcKogA:vHW138/iXWlK885rKlGSekcj66cis
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-