Extracted

• • Target

    9f28507fa16d84eefa10b851f2a9ecdbdceade2af7a97b6d1974b75e8063b7db

  • Size

    6.5MB

  • MD5

    99376ee4ed70611e27327a144ce46553

  • SHA1

    49bdca60f10a3b2957824c16b0bc862224fb0d59

  • SHA256

    9f28507fa16d84eefa10b851f2a9ecdbdceade2af7a97b6d1974b75e8063b7db

  • SHA512

    bcaa3490a23d7614aa888c6cd344d3f0a5c7a3ababdcc26646a6475ee3696c8d02a6930c9007cc2c149fff9881151dc0f81141626c511935aa64941a54954320

  • SSDEEP

    98304:Roc5swrA2XGxlHKcjTjNk3o659yrnfKtDrKIAyyks+Ctf8mQZVSW:i0LrA2kHKQHNk3og9unipQyOaOW

  Score

  10^/10

  urelastrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • UPX dump on OEP (original entry point)

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2