Extracted

• • Target

    f649801fc7bb65145b95cc267e9b32eb7010067777945edb00914a8a8f7b58a8N

  • Size

    331KB

  • MD5

    d0f5aa37150fd76ed30c94e2ea861360

  • SHA1

    0694a6dfaee9a3d72fb83cff3d059346335cceef

  • SHA256

    f649801fc7bb65145b95cc267e9b32eb7010067777945edb00914a8a8f7b58a8

  • SHA512

    de106aae556355bd8447b84b996d949c7e1495a14fa89be322eac0a1797b6be2beba68ae232dfd53260723f917a3bdb7a66cfb648f39e59937a09d91070b34bd

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYu:vHW138/iXWlK885rKlGSekcj66cib

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2