Extracted

• • Target

    1685b4e9e9e5429103ced068d567a03ad060020cbb6a0b9e689dfd669cb7810e

  • Size

    333KB

  • MD5

    fe39ab628c336257757d361c4e2ad15f

  • SHA1

    19092dbe91f5aa21fef42c5b4dc9a77329687dfb

  • SHA256

    1685b4e9e9e5429103ced068d567a03ad060020cbb6a0b9e689dfd669cb7810e

  • SHA512

    e1e54485351358657f0f0c43a346947f5ad14e7f5c91d7a996bf82c0b93bb13f38341d6fd5ae129e7807979ea48e4fd747b2a8c299b2ce05e294e557f9af63dd

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYPl:vHW138/iXWlK885rKlGSekcj66ciQ

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2