Extracted

• • Target

    d567d4695bbc7432da357e6b77e2d3f40717170c1e6ca1d7e5e21473ddbee3ea

  • Size

    6.5MB

  • MD5

    9955cf875c9f273f63f7764a8207598e

  • SHA1

    4c10ecd854b4b93fb71e9178796922c48e3a911f

  • SHA256

    d567d4695bbc7432da357e6b77e2d3f40717170c1e6ca1d7e5e21473ddbee3ea

  • SHA512

    33a569e441342488e9642cbcc806be6d5b80a2bbed8349a2dbae62c175e5f173d6cf98755940848e4b188d744e3ff21e0fc28d05083d929d2fd4ae9cdc223e12

  • SSDEEP

    98304:Roc5swrA2XGxlHKcjTjNk3o659yrnfKtDrKIAyyks+Ctf8mQZVST:i0LrA2kHKQHNk3og9unipQyOaOT

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2