Overview

overview

10

Static

static

7

NEAS.06441...00.exe

windows7-x64

10

NEAS.06441...00.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.064410bf9ca035bbc084694a3be71800.exe

  • Size

    446KB

  • Sample

    231021-z2gwwaaf2s

  • MD5

    064410bf9ca035bbc084694a3be71800

  • SHA1

    c75582a53206bb047aaae7714c56e16c01113463

  • SHA256

    62e37098e612e1429756e20645812472be1c749dd54ef0db4237d38ee3d7d1f9

  • SHA512

    0f06373c57356b7c4ba2afe0f8521af5f6fd3af27429ab5a5795e920e9ff7478758c26e956e355b9de572b953759101fa2acde743798e184a9f7bae0b038ad9e

  • SSDEEP

    12288:5Iw12WfKAzArzvrdmCQmmrwABiRxQsA3rNPaPw+NMJ24IYhS:5IhtAzg7rdm77rMQsErN/+M0f

Score
10/10
urelasaspackv2trojan

Malware Config

Targets

    • Target

      NEAS.064410bf9ca035bbc084694a3be71800.exe

    • Size

      446KB

    • MD5

      064410bf9ca035bbc084694a3be71800

    • SHA1

      c75582a53206bb047aaae7714c56e16c01113463

    • SHA256

      62e37098e612e1429756e20645812472be1c749dd54ef0db4237d38ee3d7d1f9

    • SHA512

      0f06373c57356b7c4ba2afe0f8521af5f6fd3af27429ab5a5795e920e9ff7478758c26e956e355b9de572b953759101fa2acde743798e184a9f7bae0b038ad9e

    • SSDEEP

      12288:5Iw12WfKAzArzvrdmCQmmrwABiRxQsA3rNPaPw+NMJ24IYhS:5IhtAzg7rdm77rMQsErN/+M0f

    Score
    10/10
    urelasaspackv2trojan

    • Urelas

      Urelas is a trojan targeting card games.

      trojanurelas

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks