Extracted

• • Target

    fd92d9fd78bf724c048480a7578e8d4bb6ff73465865b4336d6f75d2f7da38da

  • Size

    326KB

  • MD5

    db3ef99e9fb2072690240efd726fafd5

  • SHA1

    6995f9f7d27d7485c13a781e12466b4dd258d58c

  • SHA256

    fd92d9fd78bf724c048480a7578e8d4bb6ff73465865b4336d6f75d2f7da38da

  • SHA512

    1af6e04d2128b3b5d4ac089e4519de22a9e3da3f08c05376678c16bf960a7c8d1aa866bf0ea81e6d5a00e1c806363b0392d3f74173865b4c67cfa84255d64477

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYO:vHW138/iXWlK885rKlGSekcj66ciP

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2