Extracted

• • Target

    59b46d52fbe1241c3ef7fea2830eca60_NeikiAnalytics.exe

  • Size

    415KB

  • MD5

    59b46d52fbe1241c3ef7fea2830eca60

  • SHA1

    ac2375cb83e8e93964a5ba4283bff4b3c5fadce8

  • SHA256

    876b680120060000c51f5f13ad20fc5f53ff9036c2249dcd94fff0479be93de4

  • SHA512

    51101ad0a7ab1c1059ce8d3dcf3804e1f31495910b8c037c14b50c5ad82dc5a0dd56ee52ee4a4523b4b706a4c2e4f11a170c647f741eac9611ea6462c88b6cf4

  • SSDEEP

    6144:GzU7blKaP2iCWhWapKRaRXOkN4Swel6f3IsInODgr:oU7M5ijWh0XOW4sEfeO8r

  Score

  10^/10

  urelasaspackv2trojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2