General
-
Target
NEAS.1729d58ca7e1bbfa82e145ba2ae33840.exe
-
Size
191KB
-
Sample
231013-ygsbfage49
-
MD5
1729d58ca7e1bbfa82e145ba2ae33840
-
SHA1
b7ede0c80f8d818c24f1cfac13a85bc5343c9fc2
-
SHA256
bd28957cd5528ae2fd0e52f267d680d2998211688ef0edba0747fa95c52bd691
-
SHA512
2e1041465e64e42b20fcf404c6a8f340a48e4a5e88cdeb11f48df0b7e225c70dcfc4324e00f3634c4861573c6e3ca9bda481ddcf62ebc05ba49458478c5c8e14
-
SSDEEP
3072:mqp2cKm5DI/OQf6B6E8wervMLN78FWY6uGKq0FA11:m8la5aF4jMLh85Ab
Behavioral task
behavioral1
Sample
NEAS.1729d58ca7e1bbfa82e145ba2ae33840.exe
Resource
win7-20230831-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
NEAS.1729d58ca7e1bbfa82e145ba2ae33840.exe
-
Size
191KB
-
MD5
1729d58ca7e1bbfa82e145ba2ae33840
-
SHA1
b7ede0c80f8d818c24f1cfac13a85bc5343c9fc2
-
SHA256
bd28957cd5528ae2fd0e52f267d680d2998211688ef0edba0747fa95c52bd691
-
SHA512
2e1041465e64e42b20fcf404c6a8f340a48e4a5e88cdeb11f48df0b7e225c70dcfc4324e00f3634c4861573c6e3ca9bda481ddcf62ebc05ba49458478c5c8e14
-
SSDEEP
3072:mqp2cKm5DI/OQf6B6E8wervMLN78FWY6uGKq0FA11:m8la5aF4jMLh85Ab
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-