Extracted

• • Target

    NEAS.b0b4d7237d84ac0554025d3783738490_JC.exe

  • Size

    335KB

  • MD5

    b0b4d7237d84ac0554025d3783738490

  • SHA1

    a7c022f047afe8ca3d415934632a39432cad298a

  • SHA256

    109e35b327c59a354b2611bfc2cdfb889b2644cca2b396332f11965286979ef2

  • SHA512

    a2040ae495d8a51120baeaf981fba99d36fbc3d9aa20375b3b8b18bc5ff84e68c3c46ffd1fe968f1bdf2894a9020e6490532191a35837619754fda4531f0e638

  • SSDEEP

    6144:fn+6ZMDkaGyzBQjBzahZKeKxQ/ynQmvrVn1VZlEE9VX4fzi4ZooQ:PMDkaTBcUhZVKmqvTVrZl1VomB

  Score

  10^/10

  urelasaspackv2trojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2