Extracted

• • Target

    cdc72bfc25a430298f4da6a6d3f3327cf5fe76b809dbe07e17c649d63741733c

  • Size

    334KB

  • MD5

    d06332b00b98add142bc2aac5c94a0f2

  • SHA1

    86258a7f35b74d6c62f5e2ae7ec05cacfb105012

  • SHA256

    cdc72bfc25a430298f4da6a6d3f3327cf5fe76b809dbe07e17c649d63741733c

  • SHA512

    7a18fa80b1cae818a595adf9be937562e8148ca189b8ee785fef5a24a56f2ecf3641ca5a2096377e88a8ed8248a691c0b4bf7a93fe9cb13c1c997393b8645373

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYp:vHW138/iXWlK885rKlGSekcj66ciE

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2