Extracted

• • Target

    871789dbcfc9cd983c06321d1cffa959217e526e4b3a4a43f7ed98c22914c4cc

  • Size

    403KB

  • MD5

    5551ce6e7f9a167a8f778a1f82714473

  • SHA1

    e8d1facc9f1e727241ebdf17fb1923062af51302

  • SHA256

    871789dbcfc9cd983c06321d1cffa959217e526e4b3a4a43f7ed98c22914c4cc

  • SHA512

    2af3f45139ddd63b73fc49e7c1e4366af5f409d699c44b65e1af00cb93173a87bec790ac2ff0d90b03fe6e3ec7a583a2dd675adb79bff8d1083ec325f386d05b

  • SSDEEP

    6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohS:8IfBoDWoyFblU6hAJQnO0

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2