Extracted

• • Target

    5818e86ecfa32a8f8a763f6b6ecace2ef11e314eb740d40b553e37c96b63960fN

  • Size

    84KB

  • MD5

    3d9cb77b2c5724abbc67a17d3ccd2d70

  • SHA1

    0d5f35e3c86cec3b0da19f69d71c1dda3a16e41e

  • SHA256

    5818e86ecfa32a8f8a763f6b6ecace2ef11e314eb740d40b553e37c96b63960f

  • SHA512

    16da3e524128fadb1c7e4968f55e27e624fb61c7ce04ea5b1934a3e19f174247ecb7401eb33910033c6f719aa7db088ec600da9c0fdea1496c1f4d67598f041d

  • SSDEEP

    1536:Jz+jIHNv+vsFbwW6dk0QeLb4NMHriBRxiDkURn:JznH976dUCnuniDL

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2