General
-
Target
NEAS.c180cbe1ce8ce2f4e1b5feec30c21bd0.exe
-
Size
410KB
-
Sample
231013-zew3aafd3z
-
MD5
c180cbe1ce8ce2f4e1b5feec30c21bd0
-
SHA1
e4d2f862639542de837454be2600ef4bef508a07
-
SHA256
a07fd6ba88218926ff6ececb4fb059b1960c5b5ddea5f9c27ef09fbd315ae5cc
-
SHA512
3da743a260faa49ab0fb99bf7846de3f392715990759df8e3a38aae8974b29195958ba9dd90ac009de2a5f28fda0e0d133c43bc8bcad183d1e60b0b405c91dbb
-
SSDEEP
6144:bzwArTEDSCs5wL0DKlpn/URBudL7qRBpkvfsModogZ/SvnDTH950w:bMmQDSCs5wo0e8L7qRbQUugennHZ
Behavioral task
behavioral1
Sample
NEAS.c180cbe1ce8ce2f4e1b5feec30c21bd0.exe
Resource
win7-20230831-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.226
218.54.31.165
Targets
-
-
Target
NEAS.c180cbe1ce8ce2f4e1b5feec30c21bd0.exe
-
Size
410KB
-
MD5
c180cbe1ce8ce2f4e1b5feec30c21bd0
-
SHA1
e4d2f862639542de837454be2600ef4bef508a07
-
SHA256
a07fd6ba88218926ff6ececb4fb059b1960c5b5ddea5f9c27ef09fbd315ae5cc
-
SHA512
3da743a260faa49ab0fb99bf7846de3f392715990759df8e3a38aae8974b29195958ba9dd90ac009de2a5f28fda0e0d133c43bc8bcad183d1e60b0b405c91dbb
-
SSDEEP
6144:bzwArTEDSCs5wL0DKlpn/URBudL7qRBpkvfsModogZ/SvnDTH950w:bMmQDSCs5wo0e8L7qRbQUugennHZ
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-