Extracted

• • Target

    d2b3e1108d5c7b5a4d51e9321df9862f_JaffaCakes118

  • Size

    691KB

  • MD5

    d2b3e1108d5c7b5a4d51e9321df9862f

  • SHA1

    073d1f52d95176f876d18f4cf22a390cfb117065

  • SHA256

    4ddfbe42e257d69ae474fb6f871990caae13b79db5910afa40b72f961565204d

  • SHA512

    ca9ef37004f8570d2a7097c9cef73ed9119b479c01dde74c431a44f46c1b6ed8001b25a3df1996831671d299c0fe53ff65d5d8fd054caf384459df76efd0c6e2

  • SSDEEP

    12288:LUyI6hJQglQA0IWb8DmPySxEuBZDxywHBlP94jpguwDxXlZ1nr/:dVh6gl6Iy8R9+ZdnnP94jpgl9Bnr/

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2