Extracted

• • Target

    4b6a4a798a7e3f6e93a00e2bc2599c8a_JaffaCakes118

  • Size

    108KB

  • MD5

    4b6a4a798a7e3f6e93a00e2bc2599c8a

  • SHA1

    b652b1fbb1664f7b5764b7cf501e038ab82f61fb

  • SHA256

    f7cb3c77b1c99e5f83ddef55e435c53bd4a3432fe1d099162db1210ba772ea9b

  • SHA512

    e4eff1bd54c286c3635720e30b3088ce5b87a80aa0852da5ec3f565ae227b7a270c8c6b1df0195b2f0f7f219597c1b1441a8c655a3af5c25f015f6068e409c4c

  • SSDEEP

    1536:3JoHHwAnTtIBcNCk+syhonfC3GNKcK7+sWjcd8sWL64TGF7k:4tCc+/h0fmSid81L64TG5k

  Score

  10^/10

  urelastrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2