Extracted

• • Target

    5d79eb86d5c2b6f7a4461b00a97260e9d1da4de76df8839b052aaba231de45f2_NeikiAnalytics.exe

  • Size

    83KB

  • MD5

    72b5b7e0d5f45f6db284285f78139e60

  • SHA1

    9d10e792b1210f10c5474273525853770c807f3e

  • SHA256

    5d79eb86d5c2b6f7a4461b00a97260e9d1da4de76df8839b052aaba231de45f2

  • SHA512

    533b14e2a8d948dfd1a83ecb9209b2263e3e21238b0b5d9be54ad8968fccb4e3b440147ddf4c54c39ed9d873a1e037528acc3c8e8c3882d611554b9971058cdd

  • SSDEEP

    1536:Jz+jIHNv+vsFbwW6dk0QeLb4NMHriBRxiDkUR0q:JznH976dUCnuniDwq

  Score

  10^/10

  urelastrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2