Extracted

• • Target

    a8f7d8a2ac83a94b47a6f470e760085e_JC.exe

  • Size

    441KB

  • MD5

    a8f7d8a2ac83a94b47a6f470e760085e

  • SHA1

    53ca3845804b6bfa9124c3aab991b755cff84566

  • SHA256

    10389e97310b0517727dbb62ce89497fc7de94aa6d376e929c430efee32d1162

  • SHA512

    893694b5df4afa943e3b81c733376a7d83f4e8bd5bb419259d0152dd7229d0008c0f0e783f2f4fb69d4668f9505337bb71be98d464b52458d1b736ef5f82e87a

  • SSDEEP

    6144:r/o4H3gaDLFHlB7goSsj/ZQUWvYqDUbsbX6EdK77RXW7VGwrLO8O775:rgA3gaDdAoSOWUWvXbX5g7pW7JG

  Score

  10^/10

  urelastrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2