Extracted

• • Target

    NEAS.c5865556d3af19ccadbaf05395d01ee0.exe

  • Size

    469KB

  • MD5

    c5865556d3af19ccadbaf05395d01ee0

  • SHA1

    7f32f38d45924732b2356512fd93c60c055cb8b0

  • SHA256

    9b3f195b20dbc658a306eaa23bc29310f2cae4a55abeddf9cb4e0250823ddb57

  • SHA512

    aa20aa8cff2672c9e847bce56192f24c15afb8bcaaffb092e70fcf403ab5ecdf8fad6fc53a803262c215a26c2813335cbf6ddd382fcf663f79ad1ef5f6e25c52

  • SSDEEP

    12288:Y6twjLHj/8/GcHUIdPPzEmvTnabAh0ZnAr1Uf:Y6tQCG0UUPzEkTn4AC1+I

  Score

  10^/10

  urelastrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2