Extracted

• • Target

    Backdoor.Win32.Plite.bhte-001ebed0cc678ade59c90d6937de0dd9cec8ed1b565d3bbc6385e7534b602f55

  • Size

    486KB

  • MD5

    0e206b5d0ef3f4430c393e0d6ed2006c

  • SHA1

    2024ecc37b01aebd48d39de633a9953999c33046

  • SHA256

    001ebed0cc678ade59c90d6937de0dd9cec8ed1b565d3bbc6385e7534b602f55

  • SHA512

    21735a43b23ddf1cdd93a6bbedb3ad4b207837b8cd7c33f14669a4570222e1837802f5c4cdf473ca45d638ac92dfb74254be667b5ae06bdbf72efa7f446c1541

  • SSDEEP

    6144:3yKfEd7FQGSmAWRViVxGwl+fQSVY/Z+I2VLfFX/L3WsuF9BRIMv9alQ1pEKuH86T:3o7CGWcQSyYI2VrFKH5RBv9AQ1pEDdKK

  Score

  10^/10

  urelastrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2