Extracted

• • Target

    NEAS.27743ddc88ab4bf3cf5ed81f9973daa0.exe

  • Size

    424KB

  • MD5

    27743ddc88ab4bf3cf5ed81f9973daa0

  • SHA1

    fc8e6c954afd93e0e3b0ccd9cb80adb4f0dd6de9

  • SHA256

    10c7c3e496c3fb8ce9c8cedc71a726f359dd9b9c9ddc9113118d6eab4e83f1f8

  • SHA512

    7efaf91413230aebe94e072ff0f67a9485c87b28979cdb3ab52aab3c2b236d20d0db4fbe20fe4a544308ad418f89c50e2435aa416f32f4a6bf4da2d5894a2b33

  • SSDEEP

    6144:BKbwhNxUjDVMytD2NkWuRk/oBmodd+sAaTmQo2fkKA:4ANxU3VH1t19MsAlpXh

  Score

  10^/10

  urelasaspackv2trojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2