Extracted

• • Target

    43d1ec730b594fe8d6759d68eae77dacc18b5153248908cb699f5ea7d1e1cb74

  • Size

    272KB

  • MD5

    aecf4606a0b406bb8548b52359eced02

  • SHA1

    3e28f3c5cbac870a51875001af50d2dbc218f539

  • SHA256

    43d1ec730b594fe8d6759d68eae77dacc18b5153248908cb699f5ea7d1e1cb74

  • SHA512

    9a81b2d4fa2fb39afa1dae91df10738881c3f33e21c8cc39a5356c07e387fa0d568299493ad6347a34cfa270c97b5c0f213dd49d19097a365f8d18002805aa19

  • SSDEEP

    6144:XwgM03hO1Gw64OU4OttDPGigknGDjvzYR05CFc/SnODow:ggM03sA3uttDDgk6vzYR05Mc/QO3

  Score

  10^/10

  urelasaspackv2discoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Downloads MZ/PE file

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2