General
-
Target
4c9e1442b5b4a25515397c8130fbd760_NEAS
-
Size
91KB
-
Sample
240507-m14m2aff64
-
MD5
4c9e1442b5b4a25515397c8130fbd760
-
SHA1
1411b42c9845b3ba2d6896e8c5f59ab877c8723d
-
SHA256
f96e8ddc0f5d1b330aea957d214eff6f0c6c0f5e70b63dfa45730b80e192c0dc
-
SHA512
c2bd7ca8896a6549efac1dd7ef1263d24a3f7347d85bc8401c939d657a218ba19444517a53193031a613ac166ab749660b94da2c97108c00ba62dfcd2f92ed3b
-
SSDEEP
1536:AQ38vsm02LMSTz2u/DBP4EXfpoggoKrKDnzely4:Aha2B2u7dPfVVKr4nzeX
Static task
static1
Behavioral task
behavioral1
Sample
4c9e1442b5b4a25515397c8130fbd760_NEAS.exe
Resource
win7-20240221-en
Malware Config
Extracted
urelas
218.54.28.139
121.88.5.183
Targets
-
-
Target
4c9e1442b5b4a25515397c8130fbd760_NEAS
-
Size
91KB
-
MD5
4c9e1442b5b4a25515397c8130fbd760
-
SHA1
1411b42c9845b3ba2d6896e8c5f59ab877c8723d
-
SHA256
f96e8ddc0f5d1b330aea957d214eff6f0c6c0f5e70b63dfa45730b80e192c0dc
-
SHA512
c2bd7ca8896a6549efac1dd7ef1263d24a3f7347d85bc8401c939d657a218ba19444517a53193031a613ac166ab749660b94da2c97108c00ba62dfcd2f92ed3b
-
SSDEEP
1536:AQ38vsm02LMSTz2u/DBP4EXfpoggoKrKDnzely4:Aha2B2u7dPfVVKr4nzeX
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-