Extracted

• • Target

    326a1837acd2b7a4e1c842bf647c1eba86e4332730f341ad116a199b835f2dad

  • Size

    333KB

  • MD5

    581eab6e8b1c1d42771ae046ff6e65a8

  • SHA1

    2152ebcc38d31070aefe7ad02b414dc4a5b81b9f

  • SHA256

    326a1837acd2b7a4e1c842bf647c1eba86e4332730f341ad116a199b835f2dad

  • SHA512

    659111e8f45e1579a517176ec43f9b6bf08a90f9d5d9af0274b01948f18e6e50526cf6ca376b0ba0f2505604134d34194dfe12b6ca8cea4dddedccdc8aef9326

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY9H:vHW138/iXWlK885rKlGSekcj66ciWH

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2