General
-
Target
cee1bc86eb71016a79efd8e4976214628ff7e37ede143c5c2be86dc4e7a79ee2N.exe
-
Size
336KB
-
Sample
250122-lzzr1s1jds
-
MD5
900e3c4800edb1517eb5ab6b4d66ae20
-
SHA1
ab87969f9b60e8247657d83e4a961206cac9ca5f
-
SHA256
cee1bc86eb71016a79efd8e4976214628ff7e37ede143c5c2be86dc4e7a79ee2
-
SHA512
74989e01fd82f76b31e040757227a73c671f14abeb6317505d65ab84e9d45afc07bfa4d1079f174b31f9f5b66fa712371d20a6376c7a2d9718dc73fddb0078c0
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcKD:vHW138/iXWlK885rKlGSekcj66cib
Static task
static1
Behavioral task
behavioral1
Sample
cee1bc86eb71016a79efd8e4976214628ff7e37ede143c5c2be86dc4e7a79ee2N.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
cee1bc86eb71016a79efd8e4976214628ff7e37ede143c5c2be86dc4e7a79ee2N.exe
-
Size
336KB
-
MD5
900e3c4800edb1517eb5ab6b4d66ae20
-
SHA1
ab87969f9b60e8247657d83e4a961206cac9ca5f
-
SHA256
cee1bc86eb71016a79efd8e4976214628ff7e37ede143c5c2be86dc4e7a79ee2
-
SHA512
74989e01fd82f76b31e040757227a73c671f14abeb6317505d65ab84e9d45afc07bfa4d1079f174b31f9f5b66fa712371d20a6376c7a2d9718dc73fddb0078c0
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcKD:vHW138/iXWlK885rKlGSekcj66cib
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-