Extracted

• • Target

    058036f22cf856674f4167a53296a7bf_JC.exe

  • Size

    439KB

  • MD5

    058036f22cf856674f4167a53296a7bf

  • SHA1

    bb99e0c12b6fedf7e128cb4222c603278a31520c

  • SHA256

    2c695742e32b4e45aa28c317336953fcff6d55d3ad095dbd51df68e0ce84af96

  • SHA512

    1da0553339bd2b385c4b183fddef7fec3aafac908f7a5afb290e039b091a34908c7dc3639b40aaee74166cd56abc4db886eb6d4cb1e65e7334f9720c627f34b3

  • SSDEEP

    6144:g9XG4oXs663ypJL9fWPEmGy3AiWd3tWlRjiJEZ8yJt0TfC29qcV:gMPs663ypJ5WPyy3pWd3tWDea5t0TfHP

  Score

  10^/10

  urelastrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2