Extracted

• • Target

    712e479001a3b483063b6a4d4b5964d0N.exe

  • Size

    84KB

  • MD5

    712e479001a3b483063b6a4d4b5964d0

  • SHA1

    11e47965cf00426997d9f569178c53fcf674a9c2

  • SHA256

    5e5c02c531739d8ba66ce5aa431e4443c2d5178a87ad6d957a566b418c445913

  • SHA512

    a7e6a89ad4d0014370621b45725cd64a40ddb42d30dd7c10bb4b22f5a232e3c3265a80b1be6b9dd0a9d7130642452873ab1b9c1b2e8db00fb51e96df49985045

  • SSDEEP

    1536:Jz+jIHNv+vsFbwW6dk0QeLb4NMHriBRxiDkURd:JznH976dUCnuniDB

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2