General
-
Target
NEAS.64219ad662dbd1dad82d109d6056fda0.exe
-
Size
59KB
-
Sample
231028-ym477ahg38
-
MD5
64219ad662dbd1dad82d109d6056fda0
-
SHA1
9af2800756b2fe3e49c020489f60141f76908cfc
-
SHA256
67cd7b814781673c06da1caf646a7ff7322cc9d3a8b30689dce8c20348ecb7a2
-
SHA512
1d3380f2f79f8f04a842e114aeb2115dedc2cd47e29bd0d5bf776b5517491e04acb734f7d032d7402a548e6f9d4a04f65032f07b509664bcc54cb233e0aee3bb
-
SSDEEP
1536:JighKR+xql155X6CEVgYndCeTtLII4toUp7C:hEhl15cCmDt8I4I
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.64219ad662dbd1dad82d109d6056fda0.exe
Resource
win7-20231023-en
Malware Config
Extracted
urelas
121.88.5.184
Targets
-
-
Target
NEAS.64219ad662dbd1dad82d109d6056fda0.exe
-
Size
59KB
-
MD5
64219ad662dbd1dad82d109d6056fda0
-
SHA1
9af2800756b2fe3e49c020489f60141f76908cfc
-
SHA256
67cd7b814781673c06da1caf646a7ff7322cc9d3a8b30689dce8c20348ecb7a2
-
SHA512
1d3380f2f79f8f04a842e114aeb2115dedc2cd47e29bd0d5bf776b5517491e04acb734f7d032d7402a548e6f9d4a04f65032f07b509664bcc54cb233e0aee3bb
-
SSDEEP
1536:JighKR+xql155X6CEVgYndCeTtLII4toUp7C:hEhl15cCmDt8I4I
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-