Extracted

• • Target

    6647ac98d5694e6dd92c9de91bc8e0f0f1e3d93a05c4957cbdfdcc47791b1c1b.exe

  • Size

    287KB

  • MD5

    da93eaa1ced6f1b2cebba50e26071d67

  • SHA1

    4b5c0d50b73fc44f136b3e01bb0425d1e10894e1

  • SHA256

    6647ac98d5694e6dd92c9de91bc8e0f0f1e3d93a05c4957cbdfdcc47791b1c1b

  • SHA512

    577c4735f9464b0ef2c8d0acff668f727aff30b37401d92bf15be1b5e45278ebbc70e6bdfa217b5fa009d62bdb839abe3004eb3e73d67f66ed1923e27e8a17dd

  • SSDEEP

    6144:vf0WBaLjBbjftxoSpj/ZQUWvYqDUbsbX6EdK77RXW7VGwrLO8O7+:vMJj9/oSFWUWvXbX5g7pW7JB

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2