Extracted

• • Target

    d9aa45ec3427a6e6c708173a154f54c59fc97f5deff7f3e8ea02ea848f4efab3

  • Size

    6.5MB

  • MD5

    106e3af15846334c1edb74dd2ffc3391

  • SHA1

    5bf4021ee7e67ad451fca8881c8aed3a2d9ec819

  • SHA256

    d9aa45ec3427a6e6c708173a154f54c59fc97f5deff7f3e8ea02ea848f4efab3

  • SHA512

    d1a9780c55d37a2f0294a49df526cb691083f9721e4ea2bee38b552990d8a096b83b477f185066d197db8781d925e19e0445870be1df1de89cfc3f1a55a2d3c0

  • SSDEEP

    98304:Roc5swrA2XGxlHKcjTjNk3o659yrnfKtDrKIAyyks+Ctf8mQZVS8u:i0LrA2kHKQHNk3og9unipQyOaOt

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2