General
-
Target
4d9947f580ce0254f3197e05a8247eaab30183ad8b292e6a16fb64701c9c77a9N.exe
-
Size
629KB
-
Sample
250202-cw118s1mex
-
MD5
2636e72056b9ee9495548eb46a3a93d0
-
SHA1
9b5cda0964ceb190487911bab16225d5a4ee63bf
-
SHA256
4d9947f580ce0254f3197e05a8247eaab30183ad8b292e6a16fb64701c9c77a9
-
SHA512
13b78f3360b657e0096e2c1e7b49e23d0a3470f4a04cb4a84a65ac3977a329e76751a3d7604ac4c0f9610036f124516315fe4d26a0ebdd57ead4672baa24066e
-
SSDEEP
6144:hmbmLppYOuakY1q5Q4XMxvQ4x1OpGcm9VQl0lM/oJ4/gupe10b:hma6id1Q8zzkGHVqoq/gI
Behavioral task
behavioral1
Sample
4d9947f580ce0254f3197e05a8247eaab30183ad8b292e6a16fb64701c9c77a9N.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
Targets
-
-
Target
4d9947f580ce0254f3197e05a8247eaab30183ad8b292e6a16fb64701c9c77a9N.exe
-
Size
629KB
-
MD5
2636e72056b9ee9495548eb46a3a93d0
-
SHA1
9b5cda0964ceb190487911bab16225d5a4ee63bf
-
SHA256
4d9947f580ce0254f3197e05a8247eaab30183ad8b292e6a16fb64701c9c77a9
-
SHA512
13b78f3360b657e0096e2c1e7b49e23d0a3470f4a04cb4a84a65ac3977a329e76751a3d7604ac4c0f9610036f124516315fe4d26a0ebdd57ead4672baa24066e
-
SSDEEP
6144:hmbmLppYOuakY1q5Q4XMxvQ4x1OpGcm9VQl0lM/oJ4/gupe10b:hma6id1Q8zzkGHVqoq/gI
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-