Extracted

• • Target

    80fc578e951687a5e19d69dc68898a7b3708f2e5a8ac4a255d3a2214d465c337N.exe

  • Size

    59KB

  • MD5

    fb97e69a03e886ea582f3174c6c366d0

  • SHA1

    10c8f14c299f0842dd2abd1326c44630c4332afe

  • SHA256

    80fc578e951687a5e19d69dc68898a7b3708f2e5a8ac4a255d3a2214d465c337

  • SHA512

    01db6de6a2013f7485251922fe4cfad50232a57c30483346b80c151950724896d09fa7d9057d646c160284815f0f88dbab1e8f3bdd9aec4ab43931fb936b096b

  • SSDEEP

    1536:6W82C0Db1edMckBI1kmJAhTPY6pnouy8A:6n25DbaMySmJAhbvoutA

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2