Extracted

• • Target

    843d14070d7cb4e80b57071157cfd994

  • Size

    409KB

  • MD5

    843d14070d7cb4e80b57071157cfd994

  • SHA1

    7ef52cfcd970f12eec91eea4f78987f17f1b964b

  • SHA256

    562b15c6ade160d15a718bf6cf120ea97c7ffaebb64abf38a49833d7184722a2

  • SHA512

    93b5ed7af7f48799e949760e8687753d31f5c0b391a8651cd64effdac9dfddd93de43cd68c4beef03af477b04d3b3eb75337bcc6e78b46a9c86c618f08b9f7f2

  • SSDEEP

    6144:kzU7blKaP2iCWhWapKRaRXOkN4Swel6f3IsInOYT:eU7M5ijWh0XOW4sEfeO6

  Score

  10^/10

  urelasaspackv2trojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2