Extracted

• • Target

    c29edb7ee4b52c49705d65f990b12d56db8e5e5bbbd7afd222af5efdf412c9d3N

  • Size

    331KB

  • MD5

    d857dcb02e63d55691b2cd19e6811940

  • SHA1

    0115ff05d364bf6f6e2c84ac924684627054fb56

  • SHA256

    c29edb7ee4b52c49705d65f990b12d56db8e5e5bbbd7afd222af5efdf412c9d3

  • SHA512

    73fba4b32473c5983b51861f499b6fbb395e73fcdaa0833281524be27e79b7c922c94781bcdb2d218254b1b3d12975d01719320dbbefe5b75a9536bc8cf51d09

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYq:vHW138/iXWlK885rKlGSekcj66ciT

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2