General
-
Target
0cafeb3d70a93f5f6ca0b19aa146bae9b3696ed5d3e89600c57beffb6aebcaec.exe
-
Size
55KB
-
Sample
241112-b49snssapq
-
MD5
8a03214e0ffbe0906d7a2696dc168c84
-
SHA1
1b4df1901dd050b86e025962feb42b664c11cebd
-
SHA256
0cafeb3d70a93f5f6ca0b19aa146bae9b3696ed5d3e89600c57beffb6aebcaec
-
SHA512
67cf14cc96f786b8f73e41e6dd025603fd4af7c6dd4ba0081cfdebc75faeaf35017baef207f0db678a478cc8d7fc43a250cafd9842dc64aa53d56f51603b6836
-
SSDEEP
768:egjKOwfkQsxi4CUWsFZzdXCHuWFpuQlBVQayBAFp1pAK4gpuK1cnPdFmfbpA9ANF:bKOjssTdFMsAX1pA6G0qm1Y8jgFzK
Static task
static1
Behavioral task
behavioral1
Sample
0cafeb3d70a93f5f6ca0b19aa146bae9b3696ed5d3e89600c57beffb6aebcaec.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
0cafeb3d70a93f5f6ca0b19aa146bae9b3696ed5d3e89600c57beffb6aebcaec.exe
-
Size
55KB
-
MD5
8a03214e0ffbe0906d7a2696dc168c84
-
SHA1
1b4df1901dd050b86e025962feb42b664c11cebd
-
SHA256
0cafeb3d70a93f5f6ca0b19aa146bae9b3696ed5d3e89600c57beffb6aebcaec
-
SHA512
67cf14cc96f786b8f73e41e6dd025603fd4af7c6dd4ba0081cfdebc75faeaf35017baef207f0db678a478cc8d7fc43a250cafd9842dc64aa53d56f51603b6836
-
SSDEEP
768:egjKOwfkQsxi4CUWsFZzdXCHuWFpuQlBVQayBAFp1pAK4gpuK1cnPdFmfbpA9ANF:bKOjssTdFMsAX1pA6G0qm1Y8jgFzK
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-