Extracted

• • Target
    9ec9f0b2fb31fc1676c54936e2cb49b0N.exe
  • Size 84KB
  • SHA256 5bdf8c0bd4b6bfef666605a0f007affdaa0c25683b1181c08ea425a75ac0d652
  • MD5 9ec9f0b2fb31fc1676c54936e2cb49b0
  • SHA1 33d519d1dd5834131134838e24d28dd66f2f2612
  • SHA512 7572b9416f68004a4496b152d7c29bbe76873afe4a59436b328893f348aa38840d1cbefdc0eb6ca88265cd681d8dd53224deb66e09e0f923826ba84450b52203
  • SSDEEP 1536:Jz+jIHNv+vsFbwW6dk0QeLb4NMHriBRxiDkURFr:JznH976dUCnuniDN
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2