Extracted

• • Target

    5e67c9b3ca2a6eba314676cb426a9e21_JaffaCakes118

  • Size

    427KB

  • MD5

    5e67c9b3ca2a6eba314676cb426a9e21

  • SHA1

    c91d53b78b128e67ed207367e9e63a762c5e5518

  • SHA256

    2db98609c250d0a2131b095c7c5311948efbad752899debc55d8b27bbd60e31a

  • SHA512

    e9a0ece68a4a053c67dbdd06d133a872506f6c5b187c61dba005f286f3256c519113ad43b8e9f18f96a65647f7b9198803efdb1ac5545af0a6a16ff2fe4ba58e

  • SSDEEP

    6144:WzU7blKaP2iCWhWapKRaRXOkN4Swel6f3IsInOdsx:YU7M5ijWh0XOW4sEfeO4

  Score

  10^/10

  urelasaspackv2trojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2