Extracted

• • Target

    ca7a57d85a12aea9999d0855b39df01b46061959fde3e4d4d017176cf3247dd7.exe

  • Size

    535KB

  • MD5

    463b6d7b034ea2b275a7c6bd06b849f2

  • SHA1

    20a60c50e679915ef1415065fa170885ad280ffc

  • SHA256

    ca7a57d85a12aea9999d0855b39df01b46061959fde3e4d4d017176cf3247dd7

  • SHA512

    a66cc0480363a37815e031a8d7e8e14950a4af6404d3188497e65bfa5d0bf23b5224959ecf1f2b60f8937029bc6778a3e148b7beceddc53e6878cb99859b09b9

  • SSDEEP

    12288:cdBNKTCqqwXCcdgTw9+MvA+BisqYpxHte1oS2j:cLjQC+bs0YOj

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2