Extracted

• • Target

    79ac57c878ad9f16244eabc2354c8a15b1d01185b072594b34d89c91815b1f46

  • Size

    287KB

  • MD5

    84de16accabbabb9061df8b92a7d19e4

  • SHA1

    96e41aa004c16cbec8d053cbf6addcd28e9b10d2

  • SHA256

    79ac57c878ad9f16244eabc2354c8a15b1d01185b072594b34d89c91815b1f46

  • SHA512

    ac1cdda6a1c3391a01a4eba71667f9bb2eb78055b3cb9f25f3eb737842d8842d67fce1ebd1240d822207bb1f0b85d0be037eecc03a45820df5c5e2a88fe1cd00

  • SSDEEP

    6144:96xwSR5NtUIJEWyXuew+q1l0d2Js6H5/TZkKZ:9A3NtUISdPw+Elq2Jsm2G

  Score

  10^/10

  urelasaspackv2trojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2