General
-
Target
ece94b4e16e8b3b5423363d9340018f02d1b2cb837109def6ef2f838d99585c6N.exe
-
Size
335KB
-
Sample
250123-e71kystncp
-
MD5
28b8654544104c69057653f470567020
-
SHA1
75c7d9aaf9238f5ea4a74e8a021380479b3db10f
-
SHA256
ece94b4e16e8b3b5423363d9340018f02d1b2cb837109def6ef2f838d99585c6
-
SHA512
87c67b343f56522958ba1f539f07ae4b403655f99beccafeb7cf03a6f1b540f18a0ea2941607029468fd1e6e81b2cdf3d63d3103aa25b6225d4fbca5ee7dbbd1
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIrN:vHW138/iXWlK885rKlGSekcj66ciz
Static task
static1
Behavioral task
behavioral1
Sample
ece94b4e16e8b3b5423363d9340018f02d1b2cb837109def6ef2f838d99585c6N.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
ece94b4e16e8b3b5423363d9340018f02d1b2cb837109def6ef2f838d99585c6N.exe
-
Size
335KB
-
MD5
28b8654544104c69057653f470567020
-
SHA1
75c7d9aaf9238f5ea4a74e8a021380479b3db10f
-
SHA256
ece94b4e16e8b3b5423363d9340018f02d1b2cb837109def6ef2f838d99585c6
-
SHA512
87c67b343f56522958ba1f539f07ae4b403655f99beccafeb7cf03a6f1b540f18a0ea2941607029468fd1e6e81b2cdf3d63d3103aa25b6225d4fbca5ee7dbbd1
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIrN:vHW138/iXWlK885rKlGSekcj66ciz
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-