General
-
Target
NEAS.9d317753025927f8c2b746d3e7c16e70.exe
-
Size
423KB
-
Sample
231013-zbptssch5y
-
MD5
9d317753025927f8c2b746d3e7c16e70
-
SHA1
b579698a685bae9c827a802607a9a12703d2df07
-
SHA256
f5d7dda7214f743ef8334ce0aa6bc65389e5ce9f8df57fbca2cc22d1e5bdf675
-
SHA512
d589a55f9e693e40ca46fa6452fe3b8b2fbc070b5de23b57a22d6c738433da35e13939c578d7747397efa2dac2da7ab8597d5d360a43917a723b6f43614dcb35
-
SSDEEP
12288:L3UxAjzesuBZtpy5KPADlOxnfWVUHGpm2CjDX7BC:L3UiqswtpyhOxuGHGpmXQ
Behavioral task
behavioral1
Sample
NEAS.9d317753025927f8c2b746d3e7c16e70.exe
Resource
win7-20230831-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
NEAS.9d317753025927f8c2b746d3e7c16e70.exe
-
Size
423KB
-
MD5
9d317753025927f8c2b746d3e7c16e70
-
SHA1
b579698a685bae9c827a802607a9a12703d2df07
-
SHA256
f5d7dda7214f743ef8334ce0aa6bc65389e5ce9f8df57fbca2cc22d1e5bdf675
-
SHA512
d589a55f9e693e40ca46fa6452fe3b8b2fbc070b5de23b57a22d6c738433da35e13939c578d7747397efa2dac2da7ab8597d5d360a43917a723b6f43614dcb35
-
SSDEEP
12288:L3UxAjzesuBZtpy5KPADlOxnfWVUHGpm2CjDX7BC:L3UiqswtpyhOxuGHGpmXQ
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-