Extracted

• • Target

    5d18f23c54458bd6042b2e9e70cf459e0407172e2892e8170b08a7edae989319N

  • Size

    330KB

  • MD5

    1934b9fd3d4233a49c5a06c55d7090a0

  • SHA1

    ce80f3ef5804d5984bb7e0d49eefca29a4e16cfe

  • SHA256

    5d18f23c54458bd6042b2e9e70cf459e0407172e2892e8170b08a7edae989319

  • SHA512

    349e8661ddce7cbfb9aa7eb0f8b9014543d1c4a2ffdda8b9fecf3927b47894791765d29373656ce9658b6eadf6532107ba5be8cd583573dfca0b64852cdb8b5d

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVO:vHW138/iXWlK885rKlGSekcj66ciEO

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2