Extracted

• • Target
    f09eb0fa73736c0490e6f93895d2bec1f2471b91a9ce37a4564388d1e214137dN
  • Size 84KB
  • SHA256 f09eb0fa73736c0490e6f93895d2bec1f2471b91a9ce37a4564388d1e214137d
  • MD5 3a0ba2d29da41527646dbe93347d2640
  • SHA1 e543ece3fcd851df7493ad6558d3e864b9ce5ec3
  • SHA512 3380b8b5163489be741fb388012c0b4a521ca3d03d9c22ae8dd755aaf2b41af424256ebea7ee28d08a352f60336cd115b27d5f7674f1a25af718d0949ea94833
  • SSDEEP 1536:Jz+jIHNv+vsFbwW6dk0QeLb4NMHriBRxiDkURs:JznH976dUCnuniD4
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2