General
-
Target
1541622e3a6daa44def2d6cfc916541c03abd8728ee9a6efca45777878661dac.exe
-
Size
78KB
-
Sample
250201-xcrnnsxjgm
-
MD5
9c4eae1162b7851bbc0b2ebfe5dd98be
-
SHA1
e454a676c8ee716857a030fbce1c206c4af5f157
-
SHA256
1541622e3a6daa44def2d6cfc916541c03abd8728ee9a6efca45777878661dac
-
SHA512
f38332a38ff54f68209a0a1b6bc4d9224d2b1ef8aa58929ee468b5f44e0a231979b06b289e9ab5e27f3b536be640f708d8cee0e61ee582253259de2f277dcfb1
-
SSDEEP
768:xZU9HZe4JZxPKAgmmE2jmXwTcxlhshya4qCIDWObp2EfoiSCMy6MuHg/wrYaFRdX:xce4ZKAvTwTcshJDzo9LHyUYmdGT/4
Static task
static1
Behavioral task
behavioral1
Sample
1541622e3a6daa44def2d6cfc916541c03abd8728ee9a6efca45777878661dac.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
112.175.88.207
112.175.88.208
Targets
-
-
Target
1541622e3a6daa44def2d6cfc916541c03abd8728ee9a6efca45777878661dac.exe
-
Size
78KB
-
MD5
9c4eae1162b7851bbc0b2ebfe5dd98be
-
SHA1
e454a676c8ee716857a030fbce1c206c4af5f157
-
SHA256
1541622e3a6daa44def2d6cfc916541c03abd8728ee9a6efca45777878661dac
-
SHA512
f38332a38ff54f68209a0a1b6bc4d9224d2b1ef8aa58929ee468b5f44e0a231979b06b289e9ab5e27f3b536be640f708d8cee0e61ee582253259de2f277dcfb1
-
SSDEEP
768:xZU9HZe4JZxPKAgmmE2jmXwTcxlhshya4qCIDWObp2EfoiSCMy6MuHg/wrYaFRdX:xce4ZKAvTwTcshJDzo9LHyUYmdGT/4
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-