Extracted

• • Target

    a66f7260ec627d4ce581cfda809ff0c2607f931781375014e21e3e9b8e0a7c48N

  • Size

    59KB

  • MD5

    d9bb067382d6b9ef90a583da333edca0

  • SHA1

    aa25744d4dc67ea06c59e03859d95d952ee77309

  • SHA256

    a66f7260ec627d4ce581cfda809ff0c2607f931781375014e21e3e9b8e0a7c48

  • SHA512

    46128c298c652df560b67cf5aa7e2a4b2e66df139a290da2e3f3fcc2a98ee82bfbfedd50738bceffc68535c882f2a0eeefd9aff7d5da8ff08f04dcaa0ae6a17e

  • SSDEEP

    1536:6W82C0Db1edMckBI1kmJAhTPY6pnouy8z:6n25DbaMySmJAhbvoutz

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2