Extracted

• • Target

    650979d288ef7b78cdfb35d686289d59b51b8d0f9bb23c9780bf16b1d1ab0497.exe

  • Size

    60KB

  • MD5

    fdd82983a1b60e09530daf47f559f998

  • SHA1

    20f5446cea2250eb02871f128419fb83f2c96917

  • SHA256

    650979d288ef7b78cdfb35d686289d59b51b8d0f9bb23c9780bf16b1d1ab0497

  • SHA512

    0b926ee3ecdda0bc02e05fe2369b5bd087a4ef0f87f04f195dc93ca88f784750e0b6a81eb2bf97a391a92ba1d805968750fc449d81811d400baf9133fd1a900e

  • SSDEEP

    768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPu:nK0GjMeQG3iaQREuVZ6ro29p4YxbKd99

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2