General
-
Target
NEAS.08e0b7601aa8bdaf6eb711ca98e33770_JC.exe
-
Size
381KB
-
Sample
231013-vbtersea55
-
MD5
08e0b7601aa8bdaf6eb711ca98e33770
-
SHA1
0671cd7f07610d54e48509dd0db9ee99f1d484b2
-
SHA256
8e71d2da3d5de254768a5a03eb3b78f73c30b892d35aa2a864765ddff2fe7fd1
-
SHA512
651bdb2ba268deb93555a04534c186339908485d0dc70fd13e1012c9e1432bf8a286a12a560241cdd1408326f9d8d68326198752225a34f56b3ce788e3af17e4
-
SSDEEP
6144:A6wArTEDSCs5wL0Spe5OpvGfnGUtdeHYhZpLkg:AfmQDSCs5woiCOpvmnqHs
Behavioral task
behavioral1
Sample
NEAS.08e0b7601aa8bdaf6eb711ca98e33770_JC.exe
Resource
win7-20230831-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.226
218.54.31.165
Targets
-
-
Target
NEAS.08e0b7601aa8bdaf6eb711ca98e33770_JC.exe
-
Size
381KB
-
MD5
08e0b7601aa8bdaf6eb711ca98e33770
-
SHA1
0671cd7f07610d54e48509dd0db9ee99f1d484b2
-
SHA256
8e71d2da3d5de254768a5a03eb3b78f73c30b892d35aa2a864765ddff2fe7fd1
-
SHA512
651bdb2ba268deb93555a04534c186339908485d0dc70fd13e1012c9e1432bf8a286a12a560241cdd1408326f9d8d68326198752225a34f56b3ce788e3af17e4
-
SSDEEP
6144:A6wArTEDSCs5wL0Spe5OpvGfnGUtdeHYhZpLkg:AfmQDSCs5woiCOpvmnqHs
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-