Extracted

• • Target

    f72169dfd962fc95e8c86d356d07c35cd96873260f5d31523c11dc93236af916.exe

  • Size

    633KB

  • MD5

    b6fcc67a9b78bb28d5bc74158357e28e

  • SHA1

    ce94d1931bef3c8733228d6d72c9a360f215f2be

  • SHA256

    f72169dfd962fc95e8c86d356d07c35cd96873260f5d31523c11dc93236af916

  • SHA512

    adf0977a1873edaf5a3850c97a11ee1e0e2b7faba10964670e86183229844fbdd41df0f2231794f11a0d423c36687aa0a162d73471c96b19df543ebebd334d37

  • SSDEEP

    12288:5U7M5ijWh0XOW4sEf9OTijWh0XOW4sEfsd3:5UowYcOW4a2YcOW4s

  Score

  10^/10

  urelasaspackv2discoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2