Extracted

• • Target

    fe3d184fa112c9b908e9a584ce056d10dd6ed12f19838f9748bc4f45c293412c

  • Size

    79KB

  • MD5

    5d6d513cf8349694df4254579c218ac8

  • SHA1

    f00b37380f266540c87ab1b68dd4dca10019fdcb

  • SHA256

    fe3d184fa112c9b908e9a584ce056d10dd6ed12f19838f9748bc4f45c293412c

  • SHA512

    157ee0a21466eb7017280171cc444083ba433fe02d9540306834dd9e54a26daa5780e4f4e1e128aa5cf4da4ebf47ba802e2e55348ef0e09dbae458734c2e9d97

  • SSDEEP

    1536:9HxkDvWdB7O9dKymMyCMGni2Lz1LaRQLDEk:9RkjWjK9ABpGzlaRQLl

  Score

  10^/10

  urelastrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2