Extracted

• • Target

    55048563315ec40694cd62cfd34d07665f3acc2838ab32dd3bbbe26b6be9d737

  • Size

    414KB

  • MD5

    8150ef5c701e4b93175a661af5937c01

  • SHA1

    a3db7b0bd6b262cba1dec404f618e7f81b9ff44a

  • SHA256

    55048563315ec40694cd62cfd34d07665f3acc2838ab32dd3bbbe26b6be9d737

  • SHA512

    ee3394726d8f5baa2607649d33cd7597ea44480e1a18001ccbb8a7ca4acfc4ee5bdb0f9413e09b3627d1fb790c724c67afd6e94286f549af5cf5bcab2649cf58

  • SSDEEP

    6144:GzU7blKaP2iCWhWapKRaRXOkN4Swel6f3IsInODgR:oU7M5ijWh0XOW4sEfeO8R

  Score

  10^/10

  urelasaspackv2trojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2