Extracted

• • Target

    aafe069fc73e8c55035202c6e11e25beacc81d61fd2cc3e9e296adf7a5a6f1b9

  • Size

    325KB

  • MD5

    c5712fdd41b0abaa241a789f2ad46907

  • SHA1

    1c7a147606481531c7f254f816b4dee8bc65f302

  • SHA256

    aafe069fc73e8c55035202c6e11e25beacc81d61fd2cc3e9e296adf7a5a6f1b9

  • SHA512

    96752038b10dea6f0ac943b354ca3f60001f0198a9d498096e873b13bf32db1448895a3753ac327dcedaa92247e373afbadb2627bbd9dd2eb5218a3c936efd01

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY2:vHW138/iXWlK885rKlGSekcj66ciL

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2