Extracted

• • Target

    76cb6893f5462623a527d0aa8e71f2eb1f68623ae9c5ce7b28b091043e8dc3bcN.exe

  • Size

    335KB

  • MD5

    1994411db2a21790dc2895b8ad664790

  • SHA1

    2c43b49f603134d83d3a2214bc8b4e2246903606

  • SHA256

    76cb6893f5462623a527d0aa8e71f2eb1f68623ae9c5ce7b28b091043e8dc3bc

  • SHA512

    f4e000122fc2be4e5a2701fde16a0ce3b3f722a26d9bbf8a70b19be81dd6f85f4c5733c6ca7ddc719c2e34c33899e5440149d36e48aff63f86ddddac78b7187f

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYwL:vHW138/iXWlK885rKlGSekcj66ciVL

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2