Extracted

• • Target

    0b60022b5090168adae0323b3b9aacd4a1ecb7e1b472cc0e1a074863ea23de79.exe

  • Size

    86KB

  • MD5

    5318b79f0304b62e06762169e90a83b7

  • SHA1

    740024f22d255beffc741ed7d158cdd9c7e3f8bb

  • SHA256

    0b60022b5090168adae0323b3b9aacd4a1ecb7e1b472cc0e1a074863ea23de79

  • SHA512

    776eabed180ae256e5a6c22049db8c128cbb54f72bd0ccd1c5a11ad679f23ad4e0078fd950cd995c8ae43800258b2317d0dcd2fa0b38e267e2b9f48c394a1d5f

  • SSDEEP

    1536:Jz+jIHNv+vsFbwW6dk0QeLb4NMHriBRxiDkURFH0tH8:JznH976dUCnuniDd0R8

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2