Extracted

• • Target

    NEAS.7ac3b16774c38b6a6ab354c36dd55f40.exe

  • Size

    327KB

  • MD5

    7ac3b16774c38b6a6ab354c36dd55f40

  • SHA1

    7f8c326a1621ecd454bf6556e5cae1f779666249

  • SHA256

    b63252c4febfe03e94d075f5f2f6370a79c33395770af0981512b33323e87555

  • SHA512

    2b972971093e52d683e772342564a0db5dbd2fbda80c4f40e292f0fb1c58a230fe1df902d2da363dec7d49d43aa69103e6414c72a16b136c211254bb2195483a

  • SSDEEP

    6144:onOAG5ldEQdPd/2oSQbQFsrF1W/h84IrV7mMpH8zQW4jQw+k5e:o/G5ldDPUoSiQi4kVdcQzjje

  Score

  10^/10

  urelastrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2