Extracted

• • Target

    4cba7ca7ea7812ea7715d1307891c57b554d7a7152478af307ec295e253c57ea

  • Size

    330KB

  • MD5

    9ef1fa025984f1809c6e2b50323203b0

  • SHA1

    8dc7817731dd61874c7c559ebcd141d507066ff5

  • SHA256

    4cba7ca7ea7812ea7715d1307891c57b554d7a7152478af307ec295e253c57ea

  • SHA512

    3ea3c64ce303f8410bc05ec58f3bc2b5c99281d20d3899098c1d1266ded626152de51e586dea272e6df0f3b3c7d180675b46124672d90671aa42d2d1acc9edb4

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYq:vHW138/iXWlK885rKlGSekcj66civ

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2