Extracted

• • Target

    9d6e1791cd381d5dc03cbd241e09c1d0_NeikiAnalytics.exe

  • Size

    6.5MB

  • MD5

    9d6e1791cd381d5dc03cbd241e09c1d0

  • SHA1

    fa8beeaae0d4a8fdc8dcb3dfb127f719a3e0d29a

  • SHA256

    e00f491885497115ba49a9e0cc7331164e31e68dc1a9727677e7750c85b98f93

  • SHA512

    dd7b2691a86acf76eeda10fe63e87ef409c96590b450fe09643e8224af6e2ebbe8a2785e7b3d016f1cf2eda7a9265cddc73e9c5bc238088e271b9cbb943577a8

  • SSDEEP

    98304:Roc5swrA2XGxlHKcjTjNk3o659yrnfKtDrKIAyyks+Ctf8mQZVS+:i0LrA2kHKQHNk3og9unipQyOaO+

  Score

  10^/10

  urelastrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2