Extracted

• • Target

    80df5d58daf4b41e6bf201675d81083a9d021f4241bbc22686f31ce572a64a59.exe

  • Size

    59KB

  • MD5

    f3e44fbc2ae132390c51f91651e83c68

  • SHA1

    7b38f8b480f0af72d8a6675f7d4c262fcc75af73

  • SHA256

    80df5d58daf4b41e6bf201675d81083a9d021f4241bbc22686f31ce572a64a59

  • SHA512

    46e59518eab7d710daa1d68c91c956146c613961698c349c0d7503f9b3b201f1bbd26bf1b68747c45e44c215225b1adbda33fae1f27188a582e5213d41e7caaf

  • SSDEEP

    1536:6W82C0Db1edMckBI1kmJAhTPY6pnouy8Z:6n25DbaMySmJAhbvoutZ

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2