Extracted

• • Target

    Backdoor.Win32.Plite.bhtr-62f71e49ed5f1a322324c58e9aa1e97e206ddba975aa55e08c6d26f1fa787b0f

  • Size

    61KB

  • MD5

    ac18dbe74249bdd64ff7ddb125320064

  • SHA1

    4f5d6ef53aa3a2e8231f117225aea666b0320783

  • SHA256

    62f71e49ed5f1a322324c58e9aa1e97e206ddba975aa55e08c6d26f1fa787b0f

  • SHA512

    93328d2a668fbe14e1ddcf00cfaef5dda61a88e0fabfac5e66c1129fe2e56f1b06dc4eaa0de904ef4a6fdd2d7007b3a07844ad70b1e035347c3fc21112c5257a

  • SSDEEP

    1536:1jeTAG/cbPGIZ+yy9YKU/p5mhnD4Nje4ur13t:1jYAaM7ZSY9esEVf

  Score

  10^/10

  urelastrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2