Extracted

• • Target

    d5ebdd2cbd84967b0b9f1aec013cdd4e08b514cdf18d8d362e93fc998b3feedb

  • Size

    326KB

  • MD5

    fa9e0af05382b06bf0e4f2229fa6d583

  • SHA1

    b87c298e325e5d1805ac695f51d25b3a93ab8a04

  • SHA256

    d5ebdd2cbd84967b0b9f1aec013cdd4e08b514cdf18d8d362e93fc998b3feedb

  • SHA512

    b502c6e0cc7180eb91f76c6ba78caa71f8de47a935be10523f7db1d59fa61415841c1884f4bdd72afe102964cdd5e6767ddd19bddc8001e21a5272cc2348bcb5

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYW:vHW138/iXWlK885rKlGSekcj66ciH

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2