Extracted

• • Target

    a266d0b5f46dfe2fcf09c0105f35556217e1ac46c825c38b6c3fe78ea0d1e719

  • Size

    336KB

  • MD5

    82d6264c076a47b26405149fefcfd0eb

  • SHA1

    1c77df74030f7ada35374a4517089e04890559a0

  • SHA256

    a266d0b5f46dfe2fcf09c0105f35556217e1ac46c825c38b6c3fe78ea0d1e719

  • SHA512

    73ee712bdc9caece8a68d8fc440bc637c5c3cf8671bc2432ab0d811b10c2ceb820248a454bf880e4f6dc0b0d8f5a653a1b104020991c01fe7242f3ec5d76bcfc

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcc:vHW138/iXWlK885rKlGSekcj66cir

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2