Extracted

• • Target

    ecf7c04166f05df4bf3ba71e0840b8e3c37132d7196613aa267d9553aa73000a

  • Size

    327KB

  • MD5

    3a42324892ed90b441f4ca7f5003f197

  • SHA1

    df571092643708c31152b637ed2f1887a8f7cbea

  • SHA256

    ecf7c04166f05df4bf3ba71e0840b8e3c37132d7196613aa267d9553aa73000a

  • SHA512

    68c2a41f56bf984f95a3fcc055c96e98a7c8b35dee9b20744b9704369a30a2311965106cbde0fbd71f9d3fb4b240e4201c16efd889069d6f0d08601d7dd601b3

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYI:vHW138/iXWlK885rKlGSekcj66ci9

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2