Extracted

• • Target

    64cb9b1354a44abee386b4f2259608a815de3543f518c9715484d2ce0b59cf10

  • Size

    523KB

  • MD5

    f63a21522ee20927dce21ac0ca16fd67

  • SHA1

    6f641ba07f4f5489aeade99a87dc67ffa4b34c6e

  • SHA256

    64cb9b1354a44abee386b4f2259608a815de3543f518c9715484d2ce0b59cf10

  • SHA512

    1a7cb6d0943d97560240b3652320e11dc01ae6d9f625dc45db233a3f2e8d18ec51c18734b0900452a6719c317075e122ec3f8cea5bb019a64918c4e8db43c58e

  • SSDEEP

    6144:aGdLSOXVv/UfFP2OuNPo9oXZOYR26JAcn1GK8CpbVmQPnKAJMQ42CfDmZzcpbs:aGZSOXx/UdPEpn26Jtn11F59XTwmZP

  Score

  10^/10

  urelastrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2