General
-
Target
ee61baadb73112fe6cbffd1eee6d0150_NEAS
-
Size
450KB
-
Sample
240507-vzf5caae93
-
MD5
ee61baadb73112fe6cbffd1eee6d0150
-
SHA1
fb2235ea79d554058cffc74d55a2d50ea9fc6793
-
SHA256
1bbbca41725271df9d9fd68954323f3c687f3594dfd4659c773b0fe1dd84801b
-
SHA512
853055630a9b45df8b77909db5c3e3fd1f9b9c6f8858bf7c12c60c82bfbb14526b6f5f951cb7338ad2631d52bcd57e70e2b5baf173ae1e059652076627ee6220
-
SSDEEP
6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpjdO12:oMpASIcWYx2U6hAJQnMD
Behavioral task
behavioral1
Sample
ee61baadb73112fe6cbffd1eee6d0150_NEAS.exe
Resource
win7-20240215-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
ee61baadb73112fe6cbffd1eee6d0150_NEAS
-
Size
450KB
-
MD5
ee61baadb73112fe6cbffd1eee6d0150
-
SHA1
fb2235ea79d554058cffc74d55a2d50ea9fc6793
-
SHA256
1bbbca41725271df9d9fd68954323f3c687f3594dfd4659c773b0fe1dd84801b
-
SHA512
853055630a9b45df8b77909db5c3e3fd1f9b9c6f8858bf7c12c60c82bfbb14526b6f5f951cb7338ad2631d52bcd57e70e2b5baf173ae1e059652076627ee6220
-
SSDEEP
6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpjdO12:oMpASIcWYx2U6hAJQnMD
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-