Extracted

• • Target

    79a9298000ac5816da0161413a84bce2517f181ae9fe9e73141b1f8e4d0cc510N

  • Size

    332KB

  • MD5

    b09020dd8f734eadf440b69c73712ba0

  • SHA1

    a1fd6546be419b349d10be0f7dd6a4d2e529854e

  • SHA256

    79a9298000ac5816da0161413a84bce2517f181ae9fe9e73141b1f8e4d0cc510

  • SHA512

    67375bec2c5b3bfa940398381bbb64a5575694998b7e67ff15d975fbcbbfb0a86f75b6231ac7e979ccf6e200fa56975d5a6e719b80f6f4f5d96fddee67e2fee2

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVo:vHW138/iXWlK885rKlGSekcj66ciEo

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2