General
-
Target
NEAS.61bcdecb8b0f077763af79fd1fd85eb0_JC.exe
-
Size
166KB
-
Sample
231023-xxp1ksdc9y
-
MD5
61bcdecb8b0f077763af79fd1fd85eb0
-
SHA1
99cae9923e3abcf9a14d711fed36c85effd59301
-
SHA256
9101d1071be9e7276068c9fd932a10fd200aba6189676bd5483ef2302c772894
-
SHA512
a9cd912c3d913770900c3cec08e3800f3893cca3f9684d9fc5af5a0ab6bf1884172491af8b45ef25350c4d35c0facdd4ffc657e6a054cfd3390f82e578849167
-
SSDEEP
1536:4INb5b8WoWwACLU2/dpWbHo7dVLoUaFKcq3ePuHCg65dCo74mTrm:4ITb8WgdcknLo5Fhg65woFi
Behavioral task
behavioral1
Sample
NEAS.61bcdecb8b0f077763af79fd1fd85eb0_JC.exe
Resource
win7-20231020-en
Malware Config
Extracted
urelas
112.175.88.207
112.175.88.208
Targets
-
-
Target
NEAS.61bcdecb8b0f077763af79fd1fd85eb0_JC.exe
-
Size
166KB
-
MD5
61bcdecb8b0f077763af79fd1fd85eb0
-
SHA1
99cae9923e3abcf9a14d711fed36c85effd59301
-
SHA256
9101d1071be9e7276068c9fd932a10fd200aba6189676bd5483ef2302c772894
-
SHA512
a9cd912c3d913770900c3cec08e3800f3893cca3f9684d9fc5af5a0ab6bf1884172491af8b45ef25350c4d35c0facdd4ffc657e6a054cfd3390f82e578849167
-
SSDEEP
1536:4INb5b8WoWwACLU2/dpWbHo7dVLoUaFKcq3ePuHCg65dCo74mTrm:4ITb8WgdcknLo5Fhg65woFi
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-