Extracted

• • Target

    aa1c7b1cce8af4e05ad771abe5aa7856c2c0b29f9db45d0814f6c228cc0d4df3

  • Size

    785KB

  • MD5

    711330e20b816ca760a1aa4d4f4760eb

  • SHA1

    d9da779a619f1ffa0d2dba6b7ef752fb61ce4c25

  • SHA256

    aa1c7b1cce8af4e05ad771abe5aa7856c2c0b29f9db45d0814f6c228cc0d4df3

  • SHA512

    5438ae7b6208eaf1b9f7ecb36793a01b75a573f4d35a53b7e2651c4bdf7b2e76a6ef55625bf2775dc5dbc2004b3c19e8be00f02b76ed499af4eb38983a71b51d

  • SSDEEP

    12288:57dL4AkwWNk82HAEGfKKBhVGT5OY8pgA65t8mv5pThkJ8HxW0d8GYEggH:57dLBftJLW5YUWLrkJB0PJggH

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2