Extracted

• • Target

    31b5e38d3227620130756d128c8c15572125fb22b796175112579f4fca8d79b9.exe

  • Size

    337KB

  • MD5

    ff332f7243bd1f250025012574d5139a

  • SHA1

    0ed2909252168c6d50efd76d450ca15744ed1ade

  • SHA256

    31b5e38d3227620130756d128c8c15572125fb22b796175112579f4fca8d79b9

  • SHA512

    bcb0e93039110259ee39eda690b73eefd8d51b46d434385bc6807b03d951833fad2e57c64f488d6d61a247d0721a452848e762deb2c331cf5571d4b38f089ef8

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYWO:vHW138/iXWlK885rKlGSekcj66ciK

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2