General
-
Target
NEAS.NEASbe4985805ec5cc8f8273b9c823153320exe.exe
-
Size
121KB
-
Sample
231102-vajtyabh94
-
MD5
be4985805ec5cc8f8273b9c823153320
-
SHA1
486c5d75de7912e61e2af2904e30fd7ffc8eccb9
-
SHA256
38e440a5b202b43c33ef0b95bbfcf1018d60cb037c9dc78598ad1515aad7683d
-
SHA512
1ac56c29b002fd724529ba69871904808de921cc629418300ed4ecb4337e93779ac22643dc5110b94f317090aa7a8ed26776552aac444ce7117e1b74bbe7d36c
-
SSDEEP
1536:DVih9jjOABjWAqUffzNoBcTwE/sNW4Am8NsuPz4cnSXsWjcdy6YAiQ45D:DVSRBPCoLY5RIzNdy6YO45D
Behavioral task
behavioral1
Sample
NEAS.NEASbe4985805ec5cc8f8273b9c823153320exe.exe
Resource
win7-20231023-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
NEAS.NEASbe4985805ec5cc8f8273b9c823153320exe.exe
-
Size
121KB
-
MD5
be4985805ec5cc8f8273b9c823153320
-
SHA1
486c5d75de7912e61e2af2904e30fd7ffc8eccb9
-
SHA256
38e440a5b202b43c33ef0b95bbfcf1018d60cb037c9dc78598ad1515aad7683d
-
SHA512
1ac56c29b002fd724529ba69871904808de921cc629418300ed4ecb4337e93779ac22643dc5110b94f317090aa7a8ed26776552aac444ce7117e1b74bbe7d36c
-
SSDEEP
1536:DVih9jjOABjWAqUffzNoBcTwE/sNW4Am8NsuPz4cnSXsWjcdy6YAiQ45D:DVSRBPCoLY5RIzNdy6YO45D
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-