Extracted

• • Target

    395c38101d250916b001a9e8d9eafb50N.exe

  • Size

    84KB

  • MD5

    395c38101d250916b001a9e8d9eafb50

  • SHA1

    5bf1034a461c4c3127c3df1ddef2219ee02e4425

  • SHA256

    878ae2005915822f5fd5241cfc259d27faa8f199f6745901010ac2ed01ce400a

  • SHA512

    14a1d43a05dbb4ac43c2c8c7be714955f27e9502853f0115a6814c3aef28e3d75d967d081c2edb865dfbe236001bbaf4d1dbcbe04c11ed241e507cb55d2fbaef

  • SSDEEP

    1536:Jz+jIHNv+vsFbwW6dk0QeLb4NMHriBRxiDkURj:JznH976dUCnuniDP

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2