Extracted

• • Target

    2d34827e993e87c66f1b615ef3c5cc1dc22cb23be3d8bca3a5eb8fa6a9227110

  • Size

    84KB

  • MD5

    648c56ee62f3c3cd696fefca0773994e

  • SHA1

    e3168b6aa9a46f26f7ea5d56808d00c79abb3bf8

  • SHA256

    2d34827e993e87c66f1b615ef3c5cc1dc22cb23be3d8bca3a5eb8fa6a9227110

  • SHA512

    5cd689d5dd546df1ac510ea365d8c40f6c176184c1149a370321e48710c657220c563e898e17f77f36f1b0f62a465563c9a399078408b7deabf22d58f2c97701

  • SSDEEP

    1536:Jz+jIHNv+vsFbwW6dk0QeLb4NMHriBRxiDkURZ:JznH976dUCnuniD9

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2