General
-
Target
NEAS.97130b4a86e5bf8ef0f2ff16cdb33df0.exe
-
Size
482KB
-
Sample
231101-rkjp5sff96
-
MD5
97130b4a86e5bf8ef0f2ff16cdb33df0
-
SHA1
6bfc46c14ad3a57e4b7cd937e5eb2e134107ea5a
-
SHA256
c6f7fca4e02d13461333cd810f9a9965f9fb381dbd19d0a0f2a425ba8d315b29
-
SHA512
0ef0b6186b3333c5db5d7653f4282132f7fbd0af23f8192b0fec3ce0560e0c2d713196e12353ea6fdf5c4e66fbb0d946785228509cb41744a8eec477f0e3642e
-
SSDEEP
12288:2pbvglu0agWSFnxAEwKyLH8l+O9H6s2si2XfxKTbcH:2pbXi5xzFUBaazsiofx8E
Behavioral task
behavioral1
Sample
NEAS.97130b4a86e5bf8ef0f2ff16cdb33df0.exe
Resource
win7-20231023-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.226
218.54.31.165
Targets
-
-
Target
NEAS.97130b4a86e5bf8ef0f2ff16cdb33df0.exe
-
Size
482KB
-
MD5
97130b4a86e5bf8ef0f2ff16cdb33df0
-
SHA1
6bfc46c14ad3a57e4b7cd937e5eb2e134107ea5a
-
SHA256
c6f7fca4e02d13461333cd810f9a9965f9fb381dbd19d0a0f2a425ba8d315b29
-
SHA512
0ef0b6186b3333c5db5d7653f4282132f7fbd0af23f8192b0fec3ce0560e0c2d713196e12353ea6fdf5c4e66fbb0d946785228509cb41744a8eec477f0e3642e
-
SSDEEP
12288:2pbvglu0agWSFnxAEwKyLH8l+O9H6s2si2XfxKTbcH:2pbXi5xzFUBaazsiofx8E
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-