Extracted

• • Target

    7b10fcb173a0c622cccbc69640b3227dbabd4bf4d94f9e3a580c5c7012e5c2e6

  • Size

    386KB

  • MD5

    7dbb58e723e451b2fd9e72eb5a515a32

  • SHA1

    5c3234c56aff1c36746031758b76f126392cd0b7

  • SHA256

    7b10fcb173a0c622cccbc69640b3227dbabd4bf4d94f9e3a580c5c7012e5c2e6

  • SHA512

    6aa06d5adeba44d180f4621cd46a48bd55bf4a24f7b0332359114da2599c8bfe44bc15b5dc3deb7a51bbd324c5e54bcd8407457caa0ad892bc32c2f0f7cdca9e

  • SSDEEP

    6144:tfKUuk3Zz7INHrUP0Q9G9G8rMd1CX4/D1qPDmftZvVhlvDGjaELfDMzPS94k:NBJzsNfIG0IMHCX4b1qLmvvXlrKVfjT

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2