Extracted

• • Target

    349c68e61d4e35de8fcd859d7687cb8284ef1bf532707fb3ab1b09340d5007a0N

  • Size

    328KB

  • MD5

    796d00b1d2409d523c15ac7bf7f8f120

  • SHA1

    d3fa30b50f8ae3c9cf672040dbf0bcce2d1d8f07

  • SHA256

    349c68e61d4e35de8fcd859d7687cb8284ef1bf532707fb3ab1b09340d5007a0

  • SHA512

    ae74d34cd5900124e66da4046e42e81e890954a803e77f4f2170abd3150148caceb059e43076196cf28527aa99e30b1c285e3e9c7a6791571bf763e6793a8072

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYlc:vHW138/iXWlK885rKlGSekcj66civ

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2