Extracted

• • Target

    d35e9030076dc2a04bc378e5bd3dc5ebdf779d40a44a535488452e5b8ca1270bN

  • Size

    555KB

  • MD5

    54002530f17a3dc3197385ae3d462ef0

  • SHA1

    508027e0775aed07382caa8f66d7c686b604b6c7

  • SHA256

    d35e9030076dc2a04bc378e5bd3dc5ebdf779d40a44a535488452e5b8ca1270b

  • SHA512

    df9cc425f2ced137a61f8df50db50bca43fc651edbb2b34c8e4e568ec319396bceefe32043ca83e051e4697eb323ff61aee622813198f82e9cde795120c52aad

  • SSDEEP

    12288:zccNvdRExZGe+Q1nSoS++43x+l7QLiaEy7:znPfQp9L3olqF7

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2