Extracted

• • Target

    bb9108d709a49a0ac3184418b0b2a450N.exe

  • Size

    6.5MB

  • MD5

    bb9108d709a49a0ac3184418b0b2a450

  • SHA1

    b2f4bb601ac7ed99564eb76e61403deeb86158b3

  • SHA256

    6a5c3542e1f68e12b4f135585bb132ce42e1d82f102728f221f651cb0e9bac8e

  • SHA512

    310a2a6884751a59f5378e0f416a7b99a2408ad89575e00c008a54f22b6f04caa54508c4cce2624ddf0ea1fa32895bf5b28dacbb1ba5a641ef9ededb402192d2

  • SSDEEP

    98304:Roc5swrA2XGxlHKcjTjNk3o659yrnfKtDrKIAyyks+Ctf8mQZVSu:i0LrA2kHKQHNk3og9unipQyOaOu

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2