Extracted

• • Target

    ec7296b797b92c166939418f9b1720510222ad5ca9919c9a3f4781e81b10d06cN.exe

  • Size

    337KB

  • MD5

    74237201f106e1b4cc7f9bd57239a8b0

  • SHA1

    2aea8f5cddddd1be438504ee9d5ca6fb9eb44014

  • SHA256

    ec7296b797b92c166939418f9b1720510222ad5ca9919c9a3f4781e81b10d06c

  • SHA512

    72418e15f92cae5bb31584ecf3f4fc4083e5af3bbda433b36232c9d68a61d003862921de8cf65a1a87d621af6173e63aa4fa887a9b6a632d4de1e705d4886f5b

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYB:vHW138/iXWlK885rKlGSekcj66ciG

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2