Extracted

• • Target

    957551454d03936a503af1b711a15e0a6e25a27d636a08577bcddbaa8803f929

  • Size

    372KB

  • MD5

    f88e3c2b9e494ecaa70491c02328a120

  • SHA1

    0d0669412139d14c1a584e708f8b220c577d41d5

  • SHA256

    957551454d03936a503af1b711a15e0a6e25a27d636a08577bcddbaa8803f929

  • SHA512

    96690e219ec645c0b2fdca83b7b3086edc936bc0de4416f1a566e16d6450a84559a94a07bdd50be7ac8b5749787321f6ab3b3e0244744e3554d35a4ca2a3b2f5

  • SSDEEP

    6144:LlwArTEDSCs5wL0q/mdwoJgugiIX9Ghal1qU/YagPOl6xVrprI3z:LKmQDSCs5woMmd9axVNG4qugPO+V6

  Score

  10^/10

  urelastrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • UPX dump on OEP (original entry point)

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2