Extracted

• • Target
    ab83295535ae266f94c1a4eaa3c2f6d1faa1fb7976937ae3813b7e18da2df434
  • Size 77KB
  • SHA256 ab83295535ae266f94c1a4eaa3c2f6d1faa1fb7976937ae3813b7e18da2df434
  • MD5 877a6d806e2c051b097e497df703d3a4
  • SHA1 073f0d5584a5a53090954beb36e9b43028a585c6
  • SHA512 552633f27e5db48718b69cb35193156db2043bd7b160e9c49a0b65ee2f3556eb37b8279e6a7b1a9ff62f2d25b7d13c9056bc25662919569c5780e22581feea88
  • SSDEEP 1536:9HxkDvWdB7O9dKymMyCMGni2Lz1LaRQLDbnk:9RkjWjK9ABpGzlaRQLvk
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  urelastrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • UPX dump on OEP (original entry point)

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2