Extracted

• • Target

    6ab49ba66bb70fb055a4879d158fff82784a3fcccb324a645f79c848e896b770

  • Size

    85KB

  • MD5

    8d39ca3bb65dc22a2b26cf854560d6d1

  • SHA1

    91077a3d79c87cd1ba92177de2304a3fe92378fa

  • SHA256

    6ab49ba66bb70fb055a4879d158fff82784a3fcccb324a645f79c848e896b770

  • SHA512

    91ca60dd401728e4e056ca617e2501ced90cd824c24ddd26528f8cda1bd095479782a02ee77de0e3b5a7d8df3a4fa02f84efdcab36b86b2f8cbbf4c76a1065bb

  • SSDEEP

    1536:Jz+jIHNv+vsFbwW6dk0QeLb4NMHriBRxiDkURRS:JznH976dUCnuniD1S

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2