Extracted

• • Target

    f8beae60feb8cb699b63cebd50da965c12ea3bc1f1477adf3c930cba1364f81aN

  • Size

    330KB

  • MD5

    f1e1cde1b78c3011c4d37b778f8f28e0

  • SHA1

    1fe7cf690f5b87e656dc61d2e0855347bf511063

  • SHA256

    f8beae60feb8cb699b63cebd50da965c12ea3bc1f1477adf3c930cba1364f81a

  • SHA512

    31bca1575ae095daf1fcd97dc007c839224addbc90c72435dec7557edbfa98027c2785d7fda7874fe7635c670775a2b0f8eadaed30f4ba66d9044476aba71e9a

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYw:vHW138/iXWlK885rKlGSekcj66ci1

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2