Extracted

• • Target

    0bb4717323d2ed9f15f7fb8c90f531a8f97a850648a53bde6bf53813eca2d063N

  • Size

    332KB

  • MD5

    eb31add2db1bd5662120da89f9222d80

  • SHA1

    66e2e5b7342e0403211d1009ae153cde41e8d8ea

  • SHA256

    0bb4717323d2ed9f15f7fb8c90f531a8f97a850648a53bde6bf53813eca2d063

  • SHA512

    297e4da99eec00c0417836def0a6733a21319f912b04eec3bc7522fde0fa20662c37ac4fe5eb72ee7ffb4eb7a130bea9e38b4a034961c51983ccac5775f00b4c

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYI:vHW138/iXWlK885rKlGSekcj66cih

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2