General
-
Target
NEAS.7a214f41784041a7efdc16fc08222be0.exe
-
Size
315KB
-
Sample
231101-e5ewgace54
-
MD5
7a214f41784041a7efdc16fc08222be0
-
SHA1
fc652e71abbbc553505ade9f98103bfcedc6f057
-
SHA256
6ba2c3b7f5a0b96cf016e92eac18de078ab9a313a89a6a68ca60d07e0faf2e99
-
SHA512
777e81c915ee0472249dea8d9e278648c179f000b0c482c46f11c434828210b666077d8c92ea8c21c31e47ca09b3a0e4561f213c1c8820c6410dc33f73cdb13d
-
SSDEEP
6144:HIJsyBGAEiQPBVRzPivYJoBuYXb94oIMdd8vfZ50Mhibw4OiT:BVAWNDTJHq9DIMTW8c1iT
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.7a214f41784041a7efdc16fc08222be0.exe
Resource
win7-20231023-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.226
218.54.31.165
Targets
-
-
Target
NEAS.7a214f41784041a7efdc16fc08222be0.exe
-
Size
315KB
-
MD5
7a214f41784041a7efdc16fc08222be0
-
SHA1
fc652e71abbbc553505ade9f98103bfcedc6f057
-
SHA256
6ba2c3b7f5a0b96cf016e92eac18de078ab9a313a89a6a68ca60d07e0faf2e99
-
SHA512
777e81c915ee0472249dea8d9e278648c179f000b0c482c46f11c434828210b666077d8c92ea8c21c31e47ca09b3a0e4561f213c1c8820c6410dc33f73cdb13d
-
SSDEEP
6144:HIJsyBGAEiQPBVRzPivYJoBuYXb94oIMdd8vfZ50Mhibw4OiT:BVAWNDTJHq9DIMTW8c1iT
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-