Extracted

• • Target

    d11c187b8defc3b89cd805739a488139_JaffaCakes118

  • Size

    442KB

  • MD5

    d11c187b8defc3b89cd805739a488139

  • SHA1

    e49d7fafbefc88333789ccab02a525277e86e75f

  • SHA256

    7e195b782763cb39ec2332db1390fd32b4ae9649a812ca6b52f99071e5219eff

  • SHA512

    333edf7d59372c2828a9862b28593578fbf4c5742d1f262af6285425c3dd8f109ba9a282f52a29c087aa4108e5a011593aa97b2f36cd5603bb9eded5a3625bb9

  • SSDEEP

    6144:oo3wBi+1Py3V0a2WkRNgi3caOHO5NjEwwiYWB5mV4Pzw9ygibGGMby:rKf1PyKa2H3hOHOHz9JQ6zBx

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2