Extracted

• • Target

    d0f753d25f44cd8a7425bd26acb10b04124b93ea1dce615f421f67beabb8eede.exe

  • Size

    337KB

  • MD5

    04e240ee2f9ab0209ae9df67f16a2146

  • SHA1

    8083458b4bd2c74384a9783b08c48811a27b2453

  • SHA256

    d0f753d25f44cd8a7425bd26acb10b04124b93ea1dce615f421f67beabb8eede

  • SHA512

    aa8a82c239411a05b134ba3aa6f74042b2fb6c98b7b3c984ebf48998a817ab01966c3a854248be1cb94f4b61391616d316de64f16c6de39c6c19b47be1ebf093

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVVPR:vHW138/iXWlK885rKlGSekcj66ciEVZ

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2