Extracted

• • Target

    a8e7fd1a3f7b69061d6cf78e8489f84bb10b6eb10b84bc74344acd3f877eeef4

  • Size

    84KB

  • MD5

    e298edcade5b4d7a179d418d81300aaf

  • SHA1

    86e72df2ab1e710713c83e3300dfd5982c8f7d6b

  • SHA256

    a8e7fd1a3f7b69061d6cf78e8489f84bb10b6eb10b84bc74344acd3f877eeef4

  • SHA512

    d3364d8e6b2f24c02c6edb88d746ab814b09523acae6c2d5ede7978b8010a0365ff61b08fffd9b32e5d2020c5d1a79b8614e9f5c88c37650fe537693e4ea3be6

  • SSDEEP

    1536:Jz+jIHNv+vsFbwW6dk0QeLb4NMHriBRxiDkURR5/:JznH976dUCnuniD1h

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2