Extracted

• • Target

    f5da0f18b7517c6daae158d22eef9b377f026eb5b0e141cc943b331cea47def5

  • Size

    324KB

  • MD5

    7c4be427fb9c0b704fc7836a0262b34c

  • SHA1

    6d0aa5c39503a36d9f9e601c2614ace4aa6b169c

  • SHA256

    f5da0f18b7517c6daae158d22eef9b377f026eb5b0e141cc943b331cea47def5

  • SHA512

    8b6b78e1c78ac404ce18564d8c7c4b76b16915bce699567e002153201e649772baf8a3cd5e4ba5bf39a920ca778b3cd528ec91dd1c24db049e762664f0bb43d1

  • SSDEEP

    6144:bNEo/rmV71+I8ZD/h/vFfhxxQO4B4tqv+Hq/On1NHwBzQ4bed76a3FoSxP:bNEo/6YnZVB1rkAqcNAzQCed7J1oSx

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2