Extracted

• • Target

    264c0e563aa3618040dc4b269aeb16525ab4e7a9773c65650f206d3c82aa90ab

  • Size

    6.3MB

  • MD5

    e36c01805266dff949772bbf7054cef1

  • SHA1

    31845461fa991c40a37f5ca0b0c9378f869b78ae

  • SHA256

    264c0e563aa3618040dc4b269aeb16525ab4e7a9773c65650f206d3c82aa90ab

  • SHA512

    11601ce703c118e75408f956b865e13ae7c4af69ee67b4b745f58ac5a271de92101aa46c451a2c7c78211ef65ba2e1b4c2092a47989705e61263b38a7a2ce335

  • SSDEEP

    196608:8KRpjegCEbGaE1HFDfBxcuZUG8C8mdQOC2y+xoeC:8KiSGaIHFtyGxdQOCCC

  Score

  10^/10

  urelasaspackv2trojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2