Extracted

• • Target

    938a9946bd7de4609cf4fce1e7a818b55c5f29dd06c92d3519e6b8841582d26bN.exe

  • Size

    59KB

  • MD5

    784a06a4e32209052c721bea8cd3c548

  • SHA1

    19f251db0d6159372abfa63e48e468d716892287

  • SHA256

    df4febefba7addc0e1d19578d7bc17431744500d5ab884dd127aab0a2dbd8003

  • SHA512

    c165b90f302254f274868ef0c2f7deb1de06bdca87ade6bde75217f6e11ab20cd77d0b4c4bbe35499f801bd849db5bf23e0e6252a1e417930376d845699050f1

  • SSDEEP

    1536:6W82C0Db1edMckBI1kmJAhTPY6pnouy8qS:6n25DbaMySmJAhbvoutqS

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2