General
-
Target
ece26131038c913431cc219007176d4fe8351fb4c20f78c05e93e4bc71370f81N.exe
-
Size
512KB
-
Sample
241210-lvqnjsspa1
-
MD5
ade6d6f7f467d686639210f197f53340
-
SHA1
dde698446fb9a96fa5fdd7dd496d2306c2d8c8a0
-
SHA256
ece26131038c913431cc219007176d4fe8351fb4c20f78c05e93e4bc71370f81
-
SHA512
7658ab7f82c6080a3c43d185f84b68142765fa1679cb88c3def0dd8fec1b606f2dbdd263dbff78f48465e852bc22fc896ce9df48de8689e9c70976c12cd311e3
-
SSDEEP
12288:3o7CGWcQSyYI2VrFKH5RBv9AQ1pEDdKo0:3MUv2LAv9AQ1p4dKV
Behavioral task
behavioral1
Sample
ece26131038c913431cc219007176d4fe8351fb4c20f78c05e93e4bc71370f81N.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
ece26131038c913431cc219007176d4fe8351fb4c20f78c05e93e4bc71370f81N.exe
-
Size
512KB
-
MD5
ade6d6f7f467d686639210f197f53340
-
SHA1
dde698446fb9a96fa5fdd7dd496d2306c2d8c8a0
-
SHA256
ece26131038c913431cc219007176d4fe8351fb4c20f78c05e93e4bc71370f81
-
SHA512
7658ab7f82c6080a3c43d185f84b68142765fa1679cb88c3def0dd8fec1b606f2dbdd263dbff78f48465e852bc22fc896ce9df48de8689e9c70976c12cd311e3
-
SSDEEP
12288:3o7CGWcQSyYI2VrFKH5RBv9AQ1pEDdKo0:3MUv2LAv9AQ1p4dKV
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-