Extracted

• • Target

    28c8345ece98e67ea577d55d641b61db581c4904bf9071355517bbcb38620b62

  • Size

    329KB

  • MD5

    7e785f9f8b569204008edd4f0d9839c3

  • SHA1

    daaef1ae66676b19ee118dca0e998d5557d3f30f

  • SHA256

    28c8345ece98e67ea577d55d641b61db581c4904bf9071355517bbcb38620b62

  • SHA512

    1f370081d8ddfbb44211087946c74a4d58a5814feb7bdedb3f31d39205106922c255b2150d00653c5116b04cbe25a8636ab04de9a9cccbf407ba8cffcc52a849

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYMOR:vHW138/iXWlK885rKlGSekcj66cii

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2