Extracted

• • Target

    04b5e2b1822e876bdee3a30c5d233cf52395290c8a98ff6a7b2ec78c6bc4e365

  • Size

    330KB

  • MD5

    03b317e294b50ed6c1271ddb0b45a5a3

  • SHA1

    6f5043cef34cbfae56cae2af4d19413df3fbb297

  • SHA256

    04b5e2b1822e876bdee3a30c5d233cf52395290c8a98ff6a7b2ec78c6bc4e365

  • SHA512

    b1af32322d74a78c28215e14d653fac9fb5eaa093568c8418807b79e57b6fe84c1436d96cdd77ebc8d1940a78b1347e079b2684dfdf26130a6f205da1e78805f

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYV5:vHW138/iXWlK885rKlGSekcj66ciE5

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2