Extracted

• • Target

    1e455e13a001234b7ee8341396fa85d0ee806d95b21d8ce042a7adfd72d54295N.exe

  • Size

    85KB

  • MD5

    6d59fb82cad656f8a547bf4234caa750

  • SHA1

    e5296af48d6047a3daf65dcbeaaf1d456ecab723

  • SHA256

    1e455e13a001234b7ee8341396fa85d0ee806d95b21d8ce042a7adfd72d54295

  • SHA512

    0e686b02db6419bdf05e1d4c9efeb87a3c300ae226cd0baaf2cc9fbfd6ecf77432d188d60af6efa35814e91cfdd18b9d844c0fe5bb157e0e413305b69d57886e

  • SSDEEP

    1536:Jz+jIHNv+vsFbwW6dk0QeLb4NMHriBRxiDkURR2:JznH976dUCnuniD12

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2