Extracted

• • Target

    74f96a6b959c4db40eca9881bbb3f63bc43cc9b8f4d8345c6d7b227a82ab113bN.exe

  • Size

    332KB

  • MD5

    6680e3224b07e9b3011dc9e0243334d0

  • SHA1

    2ecac4e463467e73b00af49f77ef6b70df8e67c9

  • SHA256

    74f96a6b959c4db40eca9881bbb3f63bc43cc9b8f4d8345c6d7b227a82ab113b

  • SHA512

    2c99d4a86e8fb04b9f1b440556a38fba5f2aefd4b64ac194fd04bdc3686fb4199f05a8018e4ab983fdcbeeda2b7b5a7a63115e74074dfa73033b0698cd6e2f65

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVVU:vHW138/iXWlK885rKlGSekcj66ciEVU

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2