Extracted

• • Target

    a2d4f65d72692904575323c52235d7411b58a1790bf351701e624f41face8e8c

  • Size

    137KB

  • MD5

    33a5813e0d52f3fad7fff1f61f21716a

  • SHA1

    9a20a1149499dc7e991ddd26ba5f381ecd9c5eca

  • SHA256

    a2d4f65d72692904575323c52235d7411b58a1790bf351701e624f41face8e8c

  • SHA512

    b65c4b9f1b760ab3c281aa8e791b1977a8807b87ea0c1a44ecc151a8f78aa1d8094c0a26cb18f8a09c53c3764a6aba4664b135eaece14b23da56a20664ff314e

  • SSDEEP

    1536:X2nrJLwAXDtIBcUyk+8CooNvy3GNbcq7+sWjcd2x64Tb/pe6A8:GtpCP+/oGvWSld2x64Tb/p7R

  Score

  10^/10

  urelastrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2