Extracted

• • Target

    NEAS.62f9c85ca26185c1f0d2903491292eb0.exe

  • Size

    299KB

  • MD5

    62f9c85ca26185c1f0d2903491292eb0

  • SHA1

    0ed945a345fb44327f13f754d99d545d7318dd05

  • SHA256

    9f94732c51a45d7a32e3db43f99c8a2b08505d69bf501edb8aab71fc109ed622

  • SHA512

    7eaad13e9a14cc3d588934dcbe8e33b035d6e5c8569d64582636e9b73ee5984ca30544bc2a7b8197637faee404cc856bd533216c5b55c48cebdba8920201b3fc

  • SSDEEP

    3072:dQisJFjI/DmZwx0eJSUbx3ECbZS42t8sJ4yYdfp4Qz28h+0W6Y4704jGopBF:dQi+reSUbnbA8VKQq8hpW6p75PpBF

  Score

  10^/10

  urelastrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2