Extracted

• • Target

    NEAS.30fbf43d06640fe0b3e5c723a161a1a0.exe

  • Size

    143KB

  • MD5

    30fbf43d06640fe0b3e5c723a161a1a0

  • SHA1

    8ca198d54a2fe3696566051dd621e51f07256e9a

  • SHA256

    ce686444e9efcc8bfc02d34d6e5fe0fa92c17731552259d0f1f9c4869d42b3b4

  • SHA512

    c1edb62027bdfb59ff1d528fd5e225357eb5602751ca7aec316122d0f2b32ca2f8bf220c9eeef5982626a6b7ab69e5b3341d77387b6b8ef30a821dc6478a5c00

  • SSDEEP

    1536:L/oEFqfCZ10zcT9Yh8AIXcjyz9cOXfiXGImcatMrsWjcdW6o5gRwtTfKCl0:L/5FqCxiXEcO3XfGf2tMUW6o5gRwdll0

  Score

  10^/10

  urelastrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2