Extracted

• • Target

    826fe92e739c902f85a324941e90c9d0N.exe

  • Size

    386KB

  • MD5

    826fe92e739c902f85a324941e90c9d0

  • SHA1

    d5d2e7e42af4f5a732dd778a4b59d51fd5e812fc

  • SHA256

    7f67b06c4ab09813db303e52db5dd334eafca0eedae7500204975f3196d2ea60

  • SHA512

    bf25310d1ce7ba4815bea0571c25baac03eb60644f5614894fdd45e020a2556981518e5cb4ffbaafe7fd1dbb4cc91fc39af2186befd7267c681f407cb481df90

  • SSDEEP

    6144:tfKUuk3Zz7INHrUP0Q9G9G8rMd1CX4/D1qPDmftZvVhlvDGjaELfDMzPS94J:NBJzsNfIG0IMHCX4b1qLmvvXlrKVfjG

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2