Extracted

• • Target

    40586f51fcf0e13d5e1aa63c90d49a7a6897b09a7f953b009c4d9dd6b1c2e122N.exe

  • Size

    86KB

  • MD5

    6a371073e771186db2b34be18992dad0

  • SHA1

    3eba0c0fc3ad23ad3f33c9e23d027e10f6a783c8

  • SHA256

    40586f51fcf0e13d5e1aa63c90d49a7a6897b09a7f953b009c4d9dd6b1c2e122

  • SHA512

    e4c13515a66ab36c8b8fb2a75910d3c020db5d09c36b1d6319337a368a404e059b6305e9102be91692677a999af285d8f3e7f8fc5f22278f38078f98bdc6ab78

  • SSDEEP

    1536:Jz+jIHNv+vsFbwW6dk0QeLb4NMHriBRxiDkURFH0tHk:JznH976dUCnuniDd0Rk

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2