Extracted

• • Target

    f0d22f914b529369e0d3c4024d2e66bc644677ef4098f9db3941c691229c6ab6

  • Size

    199KB

  • MD5

    29edf446c614f0efe334d3296e38b9e1

  • SHA1

    be633f3e4efffa87350769e5f17ebbba3a8baec3

  • SHA256

    f0d22f914b529369e0d3c4024d2e66bc644677ef4098f9db3941c691229c6ab6

  • SHA512

    7ee6c7ee429f63e08041aa40bf27be85493157898a28bdd434534e0545db808335f763c3d3e04515734146dd29235215a801b20873cd7dd5b93b955f4b3d49f1

  • SSDEEP

    1536:JC6NwvWRFC2nnJQKmRTcUEj2n+UaArfaHWstECJUZLrSVkk8rBxOHMEpHXW:Pf4TdEj5Uaua2oE9fKkkuzspHXW

  Score

  10^/10

  urelastrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2