Extracted

• • Target

    0c6feec129b9cf5df3aa812b5299ae8be4253d56ac5fc87b4708073be591c620

  • Size

    331KB

  • MD5

    64fb1a59c73ab3b7acf0bb70274b1c49

  • SHA1

    8ab4f30f0bc97c61c2fec61cdfa678b8b778d2f6

  • SHA256

    0c6feec129b9cf5df3aa812b5299ae8be4253d56ac5fc87b4708073be591c620

  • SHA512

    8ec1f8c17a8a6b933f63b2c3d4660c2d0710f4e02b2b57afd826e95a2cf2f152e9706ef494a6fa8bf2f3600a5175e7c751e4bf0507ded8656f8bac869f1e883d

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVRy:vHW138/iXWlK885rKlGSekcj66ciERy

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2