Extracted

• • Target

    NEAS.f0219b17d3c3780cf803e3825218c4be_JC.exe

  • Size

    210KB

  • MD5

    f0219b17d3c3780cf803e3825218c4be

  • SHA1

    25b4a58661a4904fc634225d67650b8f6aa9a4a6

  • SHA256

    8cda6bfd770cab054d05fa5a2426059ed9f9d53ee1fcc87368231d79a888bbb1

  • SHA512

    c2afb519a64fb4fa73c5b6a93673f697c6d80d70d20cd6c97b218e4f43fa383f7a2f136b5ef35e75d5df94f8f430bef40fbb37fa5e702a9fdec20f4469474ee5

  • SSDEEP

    1536:DuhL7dKJY/aTztv1UF7+RcbpP/iOOaDXl32oNIVelT2r9ZLzi/4kgg57lmKwrr5v:GBKBy7+8pCOH1ch9ZLqrwrr58V2pmur

  Score

  10^/10

  urelastrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2