Extracted

• • Target

    ce99d6e8ad1cffb5d4e76a46f16e8c30_NeikiAnalytics.exe

  • Size

    291KB

  • MD5

    ce99d6e8ad1cffb5d4e76a46f16e8c30

  • SHA1

    e37baa5d8e50b8c61b766d047a900d001eb85a7b

  • SHA256

    f71ce100539384f9a045ea7366f699add17f32c23628680894a8ea94f9df9cb8

  • SHA512

    4831d416ddc28e15ab5f9de60f4c5af2e730214f4e4995f86bd2c982355fad8d5b6a55974038deceba1367e9cd1fc391c211af6422a18a7ee46288c6ded939b4

  • SSDEEP

    6144:96xwSR5NtUIJEWyXuew+q1l0d2Js6H5/TZkKrH:9A3NtUISdPw+Elq2Jsm2k

  Score

  10^/10

  urelasaspackv2trojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2