Extracted

• • Target

    6d55322e5234aa0bea0ef4524871b5085121343ceb9662696e3267327b4aac16

  • Size

    59KB

  • MD5

    d81faddf588f35b564c79cda1d396d8b

  • SHA1

    797e499f6c280d642e81006a8300e509d0033c3e

  • SHA256

    6d55322e5234aa0bea0ef4524871b5085121343ceb9662696e3267327b4aac16

  • SHA512

    da5a79f20932a94491ae55a5a71c95dc369cb7481e246c5a50d9ab04a0733b2022f03f45312b46aabdcc5fca64a256a87afceaa58c3c064568b8caed2d010e92

  • SSDEEP

    1536:6W82C0Db1edMckBI1kmJAhTPY6pnouy8h:6n25DbaMySmJAhbvouth

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2