Extracted

• • Target

    NEAS.f6355edcf70f465da76a85e411a4a110.exe

  • Size

    470KB

  • MD5

    f6355edcf70f465da76a85e411a4a110

  • SHA1

    d0bccd6ada6e2f85a7e20599c793d8d86e272cb0

  • SHA256

    9bac1b8a97d97578004a183f906e8538eeac645b67639e2adeb177e0fb37524b

  • SHA512

    f715888c11d6848e2e95c3d2c8db8a14aaa4535d8dae98f73378bf702dffc954680712d13462cc5a1c5a3006c528047018f2460a303a4ec284f9258bcb3f5912

  • SSDEEP

    12288:m6twjLHj/8/GcHUIdPPzEmvTnabAh0ZnAr1UJ:m6tQCG0UUPzEkTn4AC1+i

  Score

  10^/10

  urelastrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2