General
-
Target
c0fe9bd0c8b53673069794cdfe3c3e55
-
Size
348KB
-
Sample
240311-tdsetaag99
-
MD5
c0fe9bd0c8b53673069794cdfe3c3e55
-
SHA1
c2fb7d917fb9a55bcf76d23b2718bf869f435401
-
SHA256
352e47d9fe7b3b74e35e0f277f3403168bc9aaa9ff65349c54340c3320968929
-
SHA512
82e6b1b49e78ffbeb0ab8a117e07916bacc3c1282c9c1435de860905f6a2ae7953159ed4b20eb60d8359eb9c30dae82075576996b8092c37ec43cf9255cd9a6e
-
SSDEEP
6144:E/bE5G5KiR0J0dCsnGb/6VOpLc91WlvhDSNZU:Y0G5obGGraOpUWlpX
Behavioral task
behavioral1
Sample
c0fe9bd0c8b53673069794cdfe3c3e55.exe
Resource
win7-20231129-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
Targets
-
-
Target
c0fe9bd0c8b53673069794cdfe3c3e55
-
Size
348KB
-
MD5
c0fe9bd0c8b53673069794cdfe3c3e55
-
SHA1
c2fb7d917fb9a55bcf76d23b2718bf869f435401
-
SHA256
352e47d9fe7b3b74e35e0f277f3403168bc9aaa9ff65349c54340c3320968929
-
SHA512
82e6b1b49e78ffbeb0ab8a117e07916bacc3c1282c9c1435de860905f6a2ae7953159ed4b20eb60d8359eb9c30dae82075576996b8092c37ec43cf9255cd9a6e
-
SSDEEP
6144:E/bE5G5KiR0J0dCsnGb/6VOpLc91WlvhDSNZU:Y0G5obGGraOpUWlpX
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-