General
-
Target
NEAS.6cd658cb98164d99586caa0763fad050_JC.exe
-
Size
274KB
-
Sample
231021-w1xzxsab76
-
MD5
6cd658cb98164d99586caa0763fad050
-
SHA1
e4cdfb9f1c681ae574e0a573895be9c8f300f807
-
SHA256
ad8e097c4b0d3cd787c76eccb39407d227aa398a486c5b793eca18d70dc105ae
-
SHA512
7c49b3a0d74d4a98fff0ef57e6ce7a932762ec24b97f39189f52a4a6bcc47aaeb856dc84ca26d1b6586dbc2df7484ccdcd6b12a4b66a21d9f605d0552dac104b
-
SSDEEP
3072:pp56zRJ83+OJ7NoGvdwWy6k04yW/KME0j1+2:pOzRWu27dlOd5W0h
Behavioral task
behavioral1
Sample
NEAS.6cd658cb98164d99586caa0763fad050_JC.exe
Resource
win7-20231020-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
NEAS.6cd658cb98164d99586caa0763fad050_JC.exe
-
Size
274KB
-
MD5
6cd658cb98164d99586caa0763fad050
-
SHA1
e4cdfb9f1c681ae574e0a573895be9c8f300f807
-
SHA256
ad8e097c4b0d3cd787c76eccb39407d227aa398a486c5b793eca18d70dc105ae
-
SHA512
7c49b3a0d74d4a98fff0ef57e6ce7a932762ec24b97f39189f52a4a6bcc47aaeb856dc84ca26d1b6586dbc2df7484ccdcd6b12a4b66a21d9f605d0552dac104b
-
SSDEEP
3072:pp56zRJ83+OJ7NoGvdwWy6k04yW/KME0j1+2:pOzRWu27dlOd5W0h
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-