Extracted

• • Target

    NEAS.0c2d03606b3d5143db91ba165d8f9670_JC.exe

  • Size

    140KB

  • MD5

    0c2d03606b3d5143db91ba165d8f9670

  • SHA1

    fd3365dc2103974ca3b350c9a3746d3427a79684

  • SHA256

    092c5384b888f9b46c92342edb051e52606c03198027d6c1216400e2e0bab0f2

  • SHA512

    2f3bd423f64e32ce7ece077302a3123705615fd0b9908a44c307ae87a49845a6a8cfdf51c036daaf7964e8f4a0fa5d4e4b6b480aea1e2f436a0ea5661ed16a9f

  • SSDEEP

    1536:sJoHHwAnTtIBcNCk+syhonfC3GNKcK7+sWjcd0sWz64TNdFOiJ+:DtCc+/h0fmSid01z64TNdFZJ+

  Score

  10^/10

  urelastrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2