Extracted

• • Target

    40ff687d64715dcf12fdf08e1948a2ad39aef9fd6c780ce47f095130497221bb

  • Size

    354KB

  • MD5

    c03862da26242df041de131e7c8ac8f5

  • SHA1

    52aff3cf4a296ab45d3a7486c1c98abb67eaa945

  • SHA256

    40ff687d64715dcf12fdf08e1948a2ad39aef9fd6c780ce47f095130497221bb

  • SHA512

    9eee40e915060a6f3ba812e6a03da1b42d21890dbcd2e7fe58fcb69f55d0f9a9b941ffa0c7797a9b0d56d18089f8250a51c7e14fc02e927ac8255f033ac92da9

  • SSDEEP

    6144:n1KY1Atydsa9tJKNjyulRZIXE/b3MXyxX5DJ7NfY/E8L+0dHqTxBK8x+7iN3pO:nx+ydx9tSNlTIU/b37dJ75WEe+eKTxB4

  Score

  10^/10

  urelasaspackv2discoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2