Extracted

• • Target

    a6860e4daa13e3aafa606538cddd7a6b581c40f64dd832bdd45785cd0df79b89

  • Size

    325KB

  • MD5

    d64dc81e848d09e5635bbe5366a841bc

  • SHA1

    3e198978f80153c3f45bdb416a173322f22e6063

  • SHA256

    a6860e4daa13e3aafa606538cddd7a6b581c40f64dd832bdd45785cd0df79b89

  • SHA512

    97f362139822841c34923ac16d2eaf2e40f71d93241e56e2a982d768ed1876cb9a918bea0f945fe02b9271427ca9dc91e102cd87207607ff7818717c7ac1b8c6

  • SSDEEP

    6144:cEo/rmV71+I8ZD/h/vFfhxxQO4B4tqv+Hq/On1NHwBzQ4bed76a3FoSx0NG:cEo/6YnZVB1rkAqcNAzQCed7J1oSKG

  Score

  10^/10

  urelasdiscoverytrojanupx

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2