Extracted

• • Target
    27de06fca92729ff9bb8b5a9cc97fd677512910a7e2dd1e5462b9de30a8359b1
  • Size 84KB
  • SHA256 27de06fca92729ff9bb8b5a9cc97fd677512910a7e2dd1e5462b9de30a8359b1
  • MD5 74bb9261ed7bb36f0d2d0d6ade8b667b
  • SHA1 2b0b9a34e07cc5baed620b3416e3315e79453e90
  • SHA512 1edeca41a7fdde7f258d2ef397e16a1689d555beae224e0caace60bc5f2d5d081520cf0b1fea139a1066b51bdc5c933f08897ad73bd0af024b2315b2c67064b2
  • SSDEEP 1536:Jz+jIHNv+vsFbwW6dk0QeLb4NMHriBRxiDkURu:JznH976dUCnuniDK
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2