Extracted

• • Target

    d81cfc9b62f633e8388defe768ddaa5454272c1d8e733e2bbadb688770a6d127N

  • Size

    402KB

  • MD5

    4b72cb7dd2593e7d26485ab3f41c24e0

  • SHA1

    3e9703abf1d2466afcb8ad4a67251702e4f7ad89

  • SHA256

    d81cfc9b62f633e8388defe768ddaa5454272c1d8e733e2bbadb688770a6d127

  • SHA512

    1c620ede140af2d52e170c763be53a2ffc3fd3ed378e45ad234b5ad8d22521d2083ba1cf644b7c6613dc0bcc42a87ae18b8a3384f52f7b7ba5026ece9a924dd3

  • SSDEEP

    6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohCq:8IfBoDWoyFblU6hAJQnO1

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2