Extracted

• • Target

    5093d8c54f936d750247861626900165ed1a1a0b4031b2ed178ccf2125ae5e8e

  • Size

    6.5MB

  • MD5

    a0a8f5800b7e7d908d31f512b7921dec

  • SHA1

    3316cf21b5d6edd68daba5dc4ecdfaacb9278c17

  • SHA256

    5093d8c54f936d750247861626900165ed1a1a0b4031b2ed178ccf2125ae5e8e

  • SHA512

    f3d70a94887b2b69d1a76641e621cb857be7cca82fa6fdac7e53ed75d7de776a4f2ad4bf6741134474a00333387df6fc1eac27a402f5f1dce279cb47ad36cdb3

  • SSDEEP

    98304:Roc5swrA2XGxlHKcjTjNk3o659yrnfKtDrKIAyyks+Ctf8mQZVSt:i0LrA2kHKQHNk3og9unipQyOaOt

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2