Extracted

• • Target

    b1e49a81b2d5a4fadc4d214c693c34af260355447e83efd0087d2e147d80fd16.exe

  • Size

    323KB

  • MD5

    01f428dd8d99614abc98356989e4f670

  • SHA1

    f20e6797532b5fce71c49fd5ff07956bb78f4157

  • SHA256

    b1e49a81b2d5a4fadc4d214c693c34af260355447e83efd0087d2e147d80fd16

  • SHA512

    84361030864f0eb1595b9d22e608ecaf9cfcbbfc6d419e1f6b4e206a6b536863e061531367fc03b03ede426e7f60121abda1c0cba6b37c04995cd1c440493b37

  • SSDEEP

    6144:bNEo/rmV71+I8ZD/h/vFfhxxQO4B4tqv+Hq/On1NHwBzQ4bed76a3FoSxIb:bNEo/6YnZVB1rkAqcNAzQCed7J1oSc

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2