Extracted

• • Target

    dd1ae913f25c042958c763b0ab72485868230085d7e3131dc76dbebbf0b132c7N

  • Size

    167KB

  • MD5

    c9bc2f653a9dd035d8569be6b02ffe20

  • SHA1

    3ef6cbc86a9ce7b2ef415462920c1b8818d8b398

  • SHA256

    dd1ae913f25c042958c763b0ab72485868230085d7e3131dc76dbebbf0b132c7

  • SHA512

    ae0e60ccf65796d9cc6c18fe2239cab23d954b72f51a3bfb6a8983439d289c92d0744420ebb2c4ba3e911414a99ad92861382df3cff027792bd4bc820ec37aa1

  • SSDEEP

    1536:P0jMVO8LWbp4Zt/kvT2/AWbAoUETLKyUGDeF3eP8UVuC65RG08AU8f5fqeLl:P0jLTp4biALbUGcC65Q08Ak+l

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2