Extracted

• • Target

    ebb3346fdc9188a6d772b7bc5152b599a775b86d257a99c249d1146a22755afd.exe

  • Size

    543KB

  • MD5

    cdf2e902b453c3dccc1658655f7caad3

  • SHA1

    441bb83238e980f4d3f41f7c69d61de319be3923

  • SHA256

    ebb3346fdc9188a6d772b7bc5152b599a775b86d257a99c249d1146a22755afd

  • SHA512

    60af098d0bb5f263889b99bbf2a1efedaec793c63a8a5794f2df96a36dcee8e337b556e63c13c24076e6f086aa3129e2bfc8cd37e4d8d890119cce7180764638

  • SSDEEP

    12288:T52PxDgZo3ijnieactYDG7MzZSHJcvEj8dmoSxuX:92SLi70T7Mifjg

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2