Extracted

• • Target

    593b006648eb1f57e9a8995d0e68898c6b210eec615fce097a60bb97b86b75b6.exe

  • Size

    1.1MB

  • MD5

    e505fc73208350e766013e53c43a61ae

  • SHA1

    ce9b0860065dbd6c93cafa62873b073a4aa71512

  • SHA256

    593b006648eb1f57e9a8995d0e68898c6b210eec615fce097a60bb97b86b75b6

  • SHA512

    37f4b539ad9677253dbad281877dac8106f10850b4c192d2f8bafe5e88357195f310d6293b90b892e465734c1c03da4f220ec7073d7edffb0b79415ef54e7d74

  • SSDEEP

    12288:tEr6bkpYN2jF7vQZmSohg+k7j6aDG4FuA6lpgTIJcqBZ5YU:tcykpY5852j6aJGl5cqB9

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2