Extracted

• • Target

    d3f49ba9495f0c2c5e273a99f7aab3817687015cf9db1e6e86f882c80c24d81a

  • Size

    75KB

  • MD5

    1530d4beb3673cc77311d754d49cd047

  • SHA1

    66ca9a4bc6cfd5f095293a2678302653348d3fe4

  • SHA256

    d3f49ba9495f0c2c5e273a99f7aab3817687015cf9db1e6e86f882c80c24d81a

  • SHA512

    eb0a3e3a3745ae3af3e7a615e3a7d84f87cdc2c75e7ed9b3dae416d34a51af6e9ef22eb41ffb5588a107588dae566337c6f352444bfc03fd419eeac97ae422da

  • SSDEEP

    1536:9HxkDvWdB7O9dKymMyCMGni2Lz1LaRQLDxP:9RkjWjK9ABpGzlaRQLN

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2