General
-
Target
3bb9730d1ef76efb2a9d2b60e67b0d55a126bc487a77f339d7503c30f63b0cf2N.exe
-
Size
138KB
-
Sample
250201-syg9xayjgs
-
MD5
6490cbf8f2cbdc24b11a678920398c10
-
SHA1
b2c744cd46c377932eb1d17c7dd76c9cbc40a207
-
SHA256
3bb9730d1ef76efb2a9d2b60e67b0d55a126bc487a77f339d7503c30f63b0cf2
-
SHA512
e5857ead1c45f51d67678b22b599e43c03df8728ef2e9907441b964a6faa08961ba25132e8a03cc60a2e568cbb653339bd2dcc2a84903d62f9d0f09db3a5a12d
-
SSDEEP
1536:7GnrJLwAXDtIBcUyk+8CooNvy3GNbcq7+sWjcdmx64Tc/qmrk:CtpCP+/oGvWSldmx64Tc/qmA
Behavioral task
behavioral1
Sample
3bb9730d1ef76efb2a9d2b60e67b0d55a126bc487a77f339d7503c30f63b0cf2N.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
3bb9730d1ef76efb2a9d2b60e67b0d55a126bc487a77f339d7503c30f63b0cf2N.exe
-
Size
138KB
-
MD5
6490cbf8f2cbdc24b11a678920398c10
-
SHA1
b2c744cd46c377932eb1d17c7dd76c9cbc40a207
-
SHA256
3bb9730d1ef76efb2a9d2b60e67b0d55a126bc487a77f339d7503c30f63b0cf2
-
SHA512
e5857ead1c45f51d67678b22b599e43c03df8728ef2e9907441b964a6faa08961ba25132e8a03cc60a2e568cbb653339bd2dcc2a84903d62f9d0f09db3a5a12d
-
SSDEEP
1536:7GnrJLwAXDtIBcUyk+8CooNvy3GNbcq7+sWjcdmx64Tc/qmrk:CtpCP+/oGvWSldmx64Tc/qmA
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-