Extracted

• • Target

    802f50b26dad5447e397c69660a344293327d0546e5e98ab865e2313a11aa55dN

  • Size

    6.5MB

  • MD5

    e03a014cec32aa4a5a967a48757bd7f0

  • SHA1

    d110e0a0be92870e136099cffce6a86e13a46dc4

  • SHA256

    802f50b26dad5447e397c69660a344293327d0546e5e98ab865e2313a11aa55d

  • SHA512

    1b80832fcf5eb2f7b65df0bd21ecc6416130238e3036d40cb88757db2f48f445dd7b73b4f48b2a7d1302448f67d8659fc6fa81728a4fcb0602ccfa014c16f1f0

  • SSDEEP

    98304:Roc5swrA2XGxlHKcjTjNk3o659yrnfKtDrKIAyyks+Ctf8mQZVS7:i0LrA2kHKQHNk3og9unipQyOaO7

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2