Extracted

• • Target
    2a128d28bffb20f634b875c91017c4f08da20f8c3ad655c733daeb8c0344d6e2
  • Size 201KB
  • SHA256 2a128d28bffb20f634b875c91017c4f08da20f8c3ad655c733daeb8c0344d6e2
  • MD5 3008a300dcaf8ad6512c194abf0e1a3f
  • SHA1 cd3bdd991c43a84e878f4b3a50a50ff5043c0deb
  • SHA512 f708f779afbf2a0c2738b98e62c07742ed6d2d1a34f517269656370cd3b224ab59f8c96998d4c6634ea8fb30467f1c80cb0caae844804837e06113d1d2494a49
  • SSDEEP 3072:SYYutRQSc/7c6tJ8m9B5MuaRQLsfPAaR3:SYYuLQSk7ca9fMu2QeoC3
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  urelastrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • UPX dump on OEP (original entry point)

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2