General
-
Target
NEAS.78724ec003ab9d19102892967900a950.exe
-
Size
140KB
-
Sample
231106-bl3lmsfc7x
-
MD5
78724ec003ab9d19102892967900a950
-
SHA1
d13330228e37b2e31295115dfd6a6f36ced76f65
-
SHA256
70202ad057751a030d58d4e19c7d6e28b3c655948f38f549d623ca13bb83d303
-
SHA512
08d26a510730a87e54f839647c23ed51f4c67dc13194654c8a2447e3e021c10303aec088e9254e619f169fed3587437bdef9086eafd629cd88a48f1fa4c202d6
-
SSDEEP
1536:2xo3t29IAhUANTAfLocwaIG0rByDDqG+UKLnuvUYY9TRWEhVnLaMjF04q0JEGhM0:J8VUcTAWG8HGCnuvqTAGdXqQ60
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.78724ec003ab9d19102892967900a950.exe
Resource
win7-20231023-en
Malware Config
Extracted
urelas
112.175.88.207
112.175.88.208
Targets
-
-
Target
NEAS.78724ec003ab9d19102892967900a950.exe
-
Size
140KB
-
MD5
78724ec003ab9d19102892967900a950
-
SHA1
d13330228e37b2e31295115dfd6a6f36ced76f65
-
SHA256
70202ad057751a030d58d4e19c7d6e28b3c655948f38f549d623ca13bb83d303
-
SHA512
08d26a510730a87e54f839647c23ed51f4c67dc13194654c8a2447e3e021c10303aec088e9254e619f169fed3587437bdef9086eafd629cd88a48f1fa4c202d6
-
SSDEEP
1536:2xo3t29IAhUANTAfLocwaIG0rByDDqG+UKLnuvUYY9TRWEhVnLaMjF04q0JEGhM0:J8VUcTAWG8HGCnuvqTAGdXqQ60
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-