Extracted

• • Target

    b40fea8e1f6295c78958cd82244cef80d11ffa9b55ad88520fa83243b708bb12N

  • Size

    332KB

  • MD5

    64ac1bc4ca221ef927c0f5b570dd2b80

  • SHA1

    157f3607b64b7a69cc3b85ae3e6fb0855dfb9185

  • SHA256

    b40fea8e1f6295c78958cd82244cef80d11ffa9b55ad88520fa83243b708bb12

  • SHA512

    9a329ce8c12e83cf96aa821bc0d68ee107e388d99e8dc9eaca8d55bf9f62e54d48fbcba4619999925917a62372d3d931fb1a4dc4872c7e94ac516b88830f023b

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYU:vHW138/iXWlK885rKlGSekcj66ciN

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2