Extracted

• • Target

    84a112698b3529a4f24b244e23c3fd92027eb924349f876ef35c7c0e7f844e6b

  • Size

    84KB

  • MD5

    166c1187a42f846248992b70afb497be

  • SHA1

    cfbd1f3b3798a415139c4e336ce8ef9fa103237d

  • SHA256

    84a112698b3529a4f24b244e23c3fd92027eb924349f876ef35c7c0e7f844e6b

  • SHA512

    4565a554f0ef7a0c5ea3476d58ff95c6d4d547b18e0c9630cee0fb3ed658416718fb537cafd770eec4c48115e7f2df8541a55611d8bd2f77d39bf6d5d10e863b

  • SSDEEP

    1536:Jz+jIHNv+vsFbwW6dk0QeLb4NMHriBRxiDkURG:JznH976dUCnuniDS

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2