Extracted

• • Target

    635c14e9039915b579be9cb60a92844ab22752f9ee4dead4a9cc89cb496c4c11

  • Size

    331KB

  • MD5

    e03c1b27b6239ebea9c12494b4f912cb

  • SHA1

    a50459987dfa39124e5580ff86e8f25c71d512b9

  • SHA256

    635c14e9039915b579be9cb60a92844ab22752f9ee4dead4a9cc89cb496c4c11

  • SHA512

    cb720e4c0c66faed2098a2464c8518ba21fa874eda9d09bd57c9d4bfbc11382cfa2d001e53b7832b0b2b63c9f88ebcf3bb6d4312767e61f002e6381bddf460ec

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYMOFr:vHW138/iXWlK885rKlGSekcj66ciqr

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2