Extracted

• • Target

    50e91a207771c475363ac93fb43699a6e7ff1a712b006ff5d85b77d535e0c1bc.exe

  • Size

    323KB

  • MD5

    84e3ea1c240276e3e987e63979d576c0

  • SHA1

    78c3a4024d695239bb6f8dbbafdcff846d956b98

  • SHA256

    50e91a207771c475363ac93fb43699a6e7ff1a712b006ff5d85b77d535e0c1bc

  • SHA512

    22bab03ebc8add8a8c26213a5764aa248bbe9dc4403b95fd3dbf54ad7b34e242838fe5638a76040afb7ec32b28ca0b3031fa8ddab25fb0aed926dd8b9ce14ab2

  • SSDEEP

    6144:BEo/rmV71+I8ZD/h/vFfhxxQO4B4tqv+Hq/On1NHwBzQ4bed76a3FoSxo:BEo/6YnZVB1rkAqcNAzQCed7J1oSG

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2