Extracted

• • Target

    19ca4330fe650661d5afc87489240135589f3a2f4d5668f004a8a7c46ad306ce

  • Size

    589KB

  • MD5

    1eb26069580f7ab03e1121f479892e16

  • SHA1

    47a4edfcacd3e4538a17f60a8f0714b70cac7ac4

  • SHA256

    19ca4330fe650661d5afc87489240135589f3a2f4d5668f004a8a7c46ad306ce

  • SHA512

    5b8cbab02964aae8c63e0a4f0a308282b1d640f8a7a6a3d8f3e7429edc860d2d12233b6369b83257084fc1da08dd63c685d3d225bcc7a6b2e261d50d5c4373fb

  • SSDEEP

    6144:+ajY1oC+/U8Vjlx4kk9HKda4L38+V8hpdoSQbQFsrF1W/h84IrV7mMpH8zQW4jQx:OOlx4kk9HKda4Y+WoSiQi4kVdcQzjo

  Score

  10^/10

  urelastrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • UPX dump on OEP (original entry point)

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2