Extracted

• • Target

    NEAS.5a28d6f64a40b3e80bdcff39b67df1e0.exe

  • Size

    463KB

  • MD5

    5a28d6f64a40b3e80bdcff39b67df1e0

  • SHA1

    524773a06f6c2a3325ec4e1ca72de2abb44d243d

  • SHA256

    3d1ffb6aeb7a9c23af7ef97afb41c8cddca766e535b2301286c2c4ce4050b1bf

  • SHA512

    7ac0c9d3178259ace1bc7619f9278af2fee1eb3ff3cb7f0943426174afa07e5e754fa9684dbdf3b29b8686ca531809333e0243c19f640c9be98289ba2c62925f

  • SSDEEP

    6144:P8Eoe/IebBVMweZGhHdJBV70FVKLbfW2x8VyMsmD6gzOmjpi+pMJQ8uUm9unpmh:vDdUGhHdJ370FVKmP0Ml+gzzjp+lsu8

  Score

  10^/10

  urelastrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2