Extracted

• • Target

    1f769c3da14989744f5ce3e31c5e3cc580a0389400b9239e71d2b257f1200c80

  • Size

    101KB

  • MD5

    9509ade2421452dcfbf0dfa30014731e

  • SHA1

    88e70361d0c470e377498ad1aab64f8d4e18208d

  • SHA256

    1f769c3da14989744f5ce3e31c5e3cc580a0389400b9239e71d2b257f1200c80

  • SHA512

    40d8802912ccd33fa60643f1c6be23266195486ea40fef51da81148c4d8c4b84466b149d036969ec75fa8a0935b53e75f0e93fa08555ce0b046908847cbef79a

  • SSDEEP

    1536:OVNSf7hyk+I6412V6PMqAax80XAFSrRd4BH7Hlp1S:SSf9yk+U2V63XAFSrRKBHDlp1S

  Score

  10^/10

  urelastrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Detects executables built or packed with MPress PE compressor

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2