Extracted

• • Target

    f830a675b54b456f32bdcd7a4e6bbe76_JaffaCakes118

  • Size

    557KB

  • MD5

    f830a675b54b456f32bdcd7a4e6bbe76

  • SHA1

    b697688bf854b921810f9bd0eb41004691427ef4

  • SHA256

    10945d08099905059ad91a8c82998af7d5765f4bb7d2d0cb294fee7c3c668755

  • SHA512

    9cd2e8fe6ecef0e9aa0f60408ec163c1fe88630aa377ea2b893f7b7f258d02ac0bb06e428d39b7f8221edd77751488c5874f7baba1b729efe10f63f5d0a09e8d

  • SSDEEP

    12288:zccNvdRExZGe+Q1nSoS++43x+l7QLiaEyZ:znPfQp9L3olqFZ

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2