General
-
Target
NEAS.3150a2b9edf85bcc14e7cb1b6c528ce0.exe
-
Size
59KB
-
Sample
231102-q7mvmsef83
-
MD5
3150a2b9edf85bcc14e7cb1b6c528ce0
-
SHA1
a550c80928045d93cb51fb64e104b9cd7cd775f4
-
SHA256
40ccd38b1be2cc3b4283443ad754fa085e4d435b1d49b12a2abe852a317aeac3
-
SHA512
5d0c5a55b0c36dcce1e9d38e91f19d4b90d0f29359c0e83feecb64e05bdef6ff6be3339014a7f8270f84df4591f5b40f148a60f044258d727715d956022ac64d
-
SSDEEP
768:R8+RNm+UpTAGn3k21SbPGInWDCj7oeoxFNCJBwV9YzdTKXU/pOUjKt1JnZh4mIw1:1jeTAG/cbPGIZ+yy9YKU/p5mhnD4Njej
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.3150a2b9edf85bcc14e7cb1b6c528ce0.exe
Resource
win7-20231025-en
Malware Config
Extracted
urelas
112.175.88.208
112.175.88.207
Targets
-
-
Target
NEAS.3150a2b9edf85bcc14e7cb1b6c528ce0.exe
-
Size
59KB
-
MD5
3150a2b9edf85bcc14e7cb1b6c528ce0
-
SHA1
a550c80928045d93cb51fb64e104b9cd7cd775f4
-
SHA256
40ccd38b1be2cc3b4283443ad754fa085e4d435b1d49b12a2abe852a317aeac3
-
SHA512
5d0c5a55b0c36dcce1e9d38e91f19d4b90d0f29359c0e83feecb64e05bdef6ff6be3339014a7f8270f84df4591f5b40f148a60f044258d727715d956022ac64d
-
SSDEEP
768:R8+RNm+UpTAGn3k21SbPGInWDCj7oeoxFNCJBwV9YzdTKXU/pOUjKt1JnZh4mIw1:1jeTAG/cbPGIZ+yy9YKU/p5mhnD4Njej
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-