Extracted

• • Target

    0c829c5f77898ae24489949261648609bcb1a59eb65ea68b79d3ffad77b542eb

  • Size

    6.4MB

  • MD5

    bd24c7ca55b8faff55834dcb561c6bab

  • SHA1

    646922706de47355ad5f686ca3aca9616767efab

  • SHA256

    0c829c5f77898ae24489949261648609bcb1a59eb65ea68b79d3ffad77b542eb

  • SHA512

    cd1b35f80de2b6a56695bdaeb7c2950865ef3cad1420a4b6b3f604a83cae9c9f7132799a7cf468abacc5ee049829409d644c5c7d9f6839b7aa75cd72b9a3af38

  • SSDEEP

    98304:Roc5swrA2XGxlHKcjTjNk3o659yrnfKtDrKIAyyks+Ctf8mQZVSJ:i0LrA2kHKQHNk3og9unipQyOaOJ

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2