Extracted

• • Target

    1f36f7bc147a1f30de72f525e7a2fbb75bf4e6543bf4c0a6679ca709179141a8N.exe

  • Size

    275KB

  • MD5

    022503bdf26bed71c70ef8db537ccc20

  • SHA1

    3dcd6d5ec1a69cbed45629fd57234b7c2a97e78a

  • SHA256

    1f36f7bc147a1f30de72f525e7a2fbb75bf4e6543bf4c0a6679ca709179141a8

  • SHA512

    bc50119dedec553ffa54943abeb855646c326e92bdd7918f8d9f7a11a60fecb8f00c5fe943539ec6de97271ac4c75a98986d77f396a8fa0ff86666290041839b

  • SSDEEP

    6144:mscauqSZTCQgYKCoGS43WrQe/0mdxU7mysjo0nhb:zYq6gCop2KQU1TUNW7b

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2