Extracted

• • Target

    NEAS.90cf0f2336e235631a58a3b342f4e690.exe

  • Size

    488KB

  • MD5

    90cf0f2336e235631a58a3b342f4e690

  • SHA1

    c0d99ffb6f708789231657d99dc47c2c1e992260

  • SHA256

    b0e192b2b2bea5858f84ac9ae5dac817250fbc19ec0b30472133688931ca3cf1

  • SHA512

    66f2384363393c54130fcc14bec2ac9239e799239a03035fb62abaa9e69be3696d581017e40612c0b2e208a43b1a4d9785b6b859424c65bdacf8a7112cd59550

  • SSDEEP

    6144:LKQipZoO4wTpyFkHTMg7mZD4ioWLolzl7X25DJMGG8mnqYJhht/Uu9ri7bpIl:qpn7Cg7mZD4ioWwtX25DRmqirri2l

  Score

  10^/10

  urelasaspackv2trojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2