Extracted

• • Target

    5fa242b763d566a7c4b3b3e47ed1827cb168766d24949dc8f0a085d9e67edf6d.exe

  • Size

    60KB

  • MD5

    2d562fe4a9d94a20d3cfac3eb7337a58

  • SHA1

    b4dc736fdd59971bc7a46797d3ee9606d4b87cb4

  • SHA256

    5fa242b763d566a7c4b3b3e47ed1827cb168766d24949dc8f0a085d9e67edf6d

  • SHA512

    60d85c7b964c8f5f27edd5c3de6424d3a0d988d80f6167c30b93259c883cecc1319090a7ca3983d47cc75679049664589ca8c5f366b759daaf5edcab1b3de87e

  • SSDEEP

    768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPP:nK0GjMeQG3iaQREuVZ6ro29p4YxbKd9c

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2