General
- Target c0fe9bd0c8b53673069794cdfe3c3e55
- Size 348KB
- Sample240311-tdsetaag99
- SHA256 352e47d9fe7b3b74e35e0f277f3403168bc9aaa9ff65349c54340c3320968929
- MD5 c0fe9bd0c8b53673069794cdfe3c3e55
- SHA1 c2fb7d917fb9a55bcf76d23b2718bf869f435401
- SHA512 82e6b1b49e78ffbeb0ab8a117e07916bacc3c1282c9c1435de860905f6a2ae7953159ed4b20eb60d8359eb9c30dae82075576996b8092c37ec43cf9255cd9a6e
- SSDEEP 6144:E/bE5G5KiR0J0dCsnGb/6VOpLc91WlvhDSNZU:Y0G5obGGraOpUWlpX
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
c0fe9bd0c8b53673069794cdfe3c3e55.exe
Resource
win7-20231129-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target c0fe9bd0c8b53673069794cdfe3c3e55
- Size 348KB
- SHA256 352e47d9fe7b3b74e35e0f277f3403168bc9aaa9ff65349c54340c3320968929
- MD5 c0fe9bd0c8b53673069794cdfe3c3e55
- SHA1 c2fb7d917fb9a55bcf76d23b2718bf869f435401
- SHA512 82e6b1b49e78ffbeb0ab8a117e07916bacc3c1282c9c1435de860905f6a2ae7953159ed4b20eb60d8359eb9c30dae82075576996b8092c37ec43cf9255cd9a6e
- SSDEEP 6144:E/bE5G5KiR0J0dCsnGb/6VOpLc91WlvhDSNZU:Y0G5obGGraOpUWlpX
- MD5 SHA1 SHA512 SSDEEP
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL