Extracted

• • Target

    e60fbda19ab9efbed5456170696606b3661978ab8189d18153c932a4860bdc6a

  • Size

    84KB

  • MD5

    8fb9deacdd4c5bd7b94687327f3790f7

  • SHA1

    ff63272791cfb4a04b51c5aeb1b5ba2417c1ea08

  • SHA256

    e60fbda19ab9efbed5456170696606b3661978ab8189d18153c932a4860bdc6a

  • SHA512

    8749e20d2139fcc5214b1df92a7ffb9ebdd5672b9a65cbd4bbe96107274506833397d74a71cc9bfcb8d351fdeaca578ffbdb6169b08c5fc4d4797942454d5ad7

  • SSDEEP

    1536:Jz+jIHNv+vsFbwW6dk0QeLb4NMHriBRxiDkURV:JznH976dUCnuniDB

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2