Extracted

• • Target

    d12ab3185c2de04ea4a091a1b01363676330a774632f8c981aa20dfcc47e6aad.exe

  • Size

    335KB

  • MD5

    80ae7de058edde7bbdc65889eccc79c0

  • SHA1

    e6ad995afef94c2b82353fe091ba54dc610d1fb9

  • SHA256

    d12ab3185c2de04ea4a091a1b01363676330a774632f8c981aa20dfcc47e6aad

  • SHA512

    93662b5077180fa1bd52a643a8c209d73bdf7f6324eaf0323c1c4d08058c89124837ad0ebd23ba26797f6a76cf9a7d30887792fc4233ec4be6ce6b585f2d041d

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIrY:vHW138/iXWlK885rKlGSekcj66ciS

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2