Extracted

• • Target

    d9f59d6ca5ea63939c323c38adc441f19dd4b1eb1a38bcce49fe734244ed5182.exe

  • Size

    138KB

  • MD5

    e71019797add3a8cefe684ddc98bfe4b

  • SHA1

    62c3cc9c37856b9b257ad719e8db4dc616900adc

  • SHA256

    d9f59d6ca5ea63939c323c38adc441f19dd4b1eb1a38bcce49fe734244ed5182

  • SHA512

    2974d8e3f201b18b3a0c2de6f18daa6e23f257685fca8238fa0f8119e574c6ab2e32eff607cb03ee127ef0fbb827c4a16fd075b36aa337b74db8053f8eb42010

  • SSDEEP

    1536:pdcGogyTSvuuCu4cOK2y8uOZBkWdB2dsLjBS3+ZVkU2g/cmEyokjzw:p25gy6uuyXMdsLjs+vnc2okjE

  Score

  10^/10

  urelasdiscoverytrojan

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Urelas family

    urelas

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2