Extracted

• • Target

    33cd8dc19c81d0b611c9a3a4c13411d47e16818dadd905eac46565fd695aad8e

  • Size

    6.5MB

  • MD5

    05e4b2acd58ed3aefd7b44f01a2c7a74

  • SHA1

    8ebfe87ae00ed417c1bada330d927b06adf9ea23

  • SHA256

    33cd8dc19c81d0b611c9a3a4c13411d47e16818dadd905eac46565fd695aad8e

  • SHA512

    74c415991a85c35807e50421d287ea14c6f7a10dfb9ac4b8ade37ba5d8cd45b61dd83f08bb60317995d88c176afa6842133c2f3fa9a610d4060d75697286a2e7

  • SSDEEP

    98304:Roc5swrA2XGxlHKcjTjNk3o659yrnfKtDrKIAyyks+Ctf8mQZVSY:i0LrA2kHKQHNk3og9unipQyOaOY

  Score

  10^/10

  urelastrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • UPX dump on OEP (original entry point)

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2