Extracted

• • Target

    NEAS.a104af8e0067fd605e098d1b24e13410_JC.exe

  • Size

    141KB

  • MD5

    a104af8e0067fd605e098d1b24e13410

  • SHA1

    c881014e7aadc7ebed912f1d07d25a4109b9ab3e

  • SHA256

    1bc7be609a83bfa86ee69afd364420968cf6e37e4f2720e61c2b2fd70fb7a8ec

  • SHA512

    0b7db8820505dd289afcd898256c8228d9693f3433f6ee14d89348839762397625deb15b15c51ec2e539a086a5fabc8f225b4b8634fc7b027aa48486cc7fd190

  • SSDEEP

    3072:K3kHmMsmRUOMfCECCeZlmgchdvz6xs9PY0X85jx08aAP52jKR2jKqRWQ:zHbRUOqwC4mgg44jKojKqRb

  Score

  10^/10

  urelastrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2