General
-
Target
NEAS.a4ea33709df3ce221d3be12e067f7c60.exe
-
Size
462KB
-
Sample
231031-kwe3rsdd4z
-
MD5
a4ea33709df3ce221d3be12e067f7c60
-
SHA1
1526904e22da7501b3cbbdaa36e3ab403606f4fe
-
SHA256
3f5922020afc585c228569bd660271d56af1a8dc9534aebf0c624b3e090b8722
-
SHA512
835a82030001ad761aa6b1099c28209fb7d3dc6cb774fce663ddd25c08de9ee5c9a34edebc21cb9ebdb4a613bb83382e1dedc881ad614b962812fe478a84a950
-
SSDEEP
6144:PEK25f5ySIcWLsxIIW4DYM6SB6mwrxcvkzmSOphmH:PMpASIcWYx2U6kQnt
Behavioral task
behavioral1
Sample
NEAS.a4ea33709df3ce221d3be12e067f7c60.exe
Resource
win7-20231023-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
NEAS.a4ea33709df3ce221d3be12e067f7c60.exe
-
Size
462KB
-
MD5
a4ea33709df3ce221d3be12e067f7c60
-
SHA1
1526904e22da7501b3cbbdaa36e3ab403606f4fe
-
SHA256
3f5922020afc585c228569bd660271d56af1a8dc9534aebf0c624b3e090b8722
-
SHA512
835a82030001ad761aa6b1099c28209fb7d3dc6cb774fce663ddd25c08de9ee5c9a34edebc21cb9ebdb4a613bb83382e1dedc881ad614b962812fe478a84a950
-
SSDEEP
6144:PEK25f5ySIcWLsxIIW4DYM6SB6mwrxcvkzmSOphmH:PMpASIcWYx2U6kQnt
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-