Extracted

• • Target

    6e6e918d43bc49be9021b4dd58726fd0ca2c49dd746f31e892bc89e675c26dfb.exe

  • Size

    336KB

  • MD5

    70c6382e43012fb0d1636bc74bb11f90

  • SHA1

    6d483c4af8d32a91b1b8f8da35fedbb4311769d5

  • SHA256

    6e6e918d43bc49be9021b4dd58726fd0ca2c49dd746f31e892bc89e675c26dfb

  • SHA512

    801f884cd7b2d13d4b7d50b62cea35f78ca32ebce8ebd983c7f7d75b47eee95055b4007f241ffc82ac9f876507b201eed70e15da7e5507b46fdd324a4dcc9be4

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcEGC:vHW138/iXWlK885rKlGSekcj66cih

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2