General
-
Target
a8d0b692500c8214020385b27086b0dab3548756a01e348117f83c6e7d2e269b.exe
-
Size
56KB
-
Sample
250207-3kkg8avlcr
-
MD5
0ca914b7d1899e4fdd4562337b0c3ffe
-
SHA1
bff97fece966f865b1fc436f7c66ed14b53abfa0
-
SHA256
a8d0b692500c8214020385b27086b0dab3548756a01e348117f83c6e7d2e269b
-
SHA512
07a253cbef1889a42ae914528f2c3b223a454b103f26ca57dd53a2da28533b53fbc88165523bbc3635ef06cb5f8fabc053f63a18830a44376d93155171ba3170
-
SSDEEP
768:OFzZyc8/WgdkRgce6VDpld8uspLqu+X/sqXnDwJb9FZBrXiDgRpzo1YA0ponrPXe:04/WgLAjdZsp+uChoLnDeoqYAJjK9
Static task
static1
Behavioral task
behavioral1
Sample
a8d0b692500c8214020385b27086b0dab3548756a01e348117f83c6e7d2e269b.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
a8d0b692500c8214020385b27086b0dab3548756a01e348117f83c6e7d2e269b.exe
-
Size
56KB
-
MD5
0ca914b7d1899e4fdd4562337b0c3ffe
-
SHA1
bff97fece966f865b1fc436f7c66ed14b53abfa0
-
SHA256
a8d0b692500c8214020385b27086b0dab3548756a01e348117f83c6e7d2e269b
-
SHA512
07a253cbef1889a42ae914528f2c3b223a454b103f26ca57dd53a2da28533b53fbc88165523bbc3635ef06cb5f8fabc053f63a18830a44376d93155171ba3170
-
SSDEEP
768:OFzZyc8/WgdkRgce6VDpld8uspLqu+X/sqXnDwJb9FZBrXiDgRpzo1YA0ponrPXe:04/WgLAjdZsp+uChoLnDeoqYAJjK9
-
Urelas family
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-