General
-
Target
9ac0c3b480a8ff5e9818883f120c6d881dd1ad074258edb253195873da84624c.exe
-
Size
59KB
-
Sample
250205-qmskdsxqb1
-
MD5
4ae31044ec0012a79e3beef6ae9daf73
-
SHA1
a8843f037f71c2e52d339a36e683c579b91daf65
-
SHA256
9ac0c3b480a8ff5e9818883f120c6d881dd1ad074258edb253195873da84624c
-
SHA512
3bde9a175711022a2e7fc836f7a19bc165092f6614659bb72a960a044aa36e40bb0a2545360673c223951ff063953441b15bad2daeb450272ab565ee87b6c054
-
SSDEEP
768:jb4zb59Yix/RoyH+5flZirYqc97vFvrpaZG3DHvTdA9GgnOuS5Z3WXcKIZx5uDn:jbQx5oPsr2vFxDPhAvzgdWLIZ7yn
Static task
static1
Behavioral task
behavioral1
Sample
9ac0c3b480a8ff5e9818883f120c6d881dd1ad074258edb253195873da84624c.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
9ac0c3b480a8ff5e9818883f120c6d881dd1ad074258edb253195873da84624c.exe
-
Size
59KB
-
MD5
4ae31044ec0012a79e3beef6ae9daf73
-
SHA1
a8843f037f71c2e52d339a36e683c579b91daf65
-
SHA256
9ac0c3b480a8ff5e9818883f120c6d881dd1ad074258edb253195873da84624c
-
SHA512
3bde9a175711022a2e7fc836f7a19bc165092f6614659bb72a960a044aa36e40bb0a2545360673c223951ff063953441b15bad2daeb450272ab565ee87b6c054
-
SSDEEP
768:jb4zb59Yix/RoyH+5flZirYqc97vFvrpaZG3DHvTdA9GgnOuS5Z3WXcKIZx5uDn:jbQx5oPsr2vFxDPhAvzgdWLIZ7yn
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-