urelas

General

Target
d59cb7c4fc0359fbb81af27fe041f753f16df54889073cbe0f1a3fcd41aebf00
Size 331KB
Sample240320-bfa97sdd71
SHA256 d59cb7c4fc0359fbb81af27fe041f753f16df54889073cbe0f1a3fcd41aebf00
MD5 9dd456508ac49c96dd6bfd4fa9da981b
SHA1 666a9fa56747bce1ffa6bc6c44845d8d47f4f816
SHA512 c9f9e47dab91cc24f540fbf80d98156f540d98ffe119dd2c252c930041fe51f73ccdae3bd7e1151ee34b3749ca78d4be0f23947a384f69d796202ee7556939c0
SSDEEP 6144:z2OLVRwlV7sW0+pnvcP+fBtz1+MZ0ht7V+RGT2ZsoCtVpywpW:BLValVIT+pntB+s0htJ+FZsFVp0
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226
218.54.31.165

Targets

- Target
  d59cb7c4fc0359fbb81af27fe041f753f16df54889073cbe0f1a3fcd41aebf00
- Size 331KB
- SHA256 d59cb7c4fc0359fbb81af27fe041f753f16df54889073cbe0f1a3fcd41aebf00
- MD5 9dd456508ac49c96dd6bfd4fa9da981b
- SHA1 666a9fa56747bce1ffa6bc6c44845d8d47f4f816
- SHA512 c9f9e47dab91cc24f540fbf80d98156f540d98ffe119dd2c252c930041fe51f73ccdae3bd7e1151ee34b3749ca78d4be0f23947a384f69d796202ee7556939c0
- SSDEEP 6144:z2OLVRwlV7sW0+pnvcP+fBtz1+MZ0ht7V+RGT2ZsoCtVpywpW:BLValVIT+pntB+s0htJ+FZsFVp0
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

urelas aspackv2 trojan
- Urelas
  Urelas is a trojan targeting card games.
  trojan urelas
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

2

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

ASPack v2.12-2.42

Checks computer location settings

Deletes itself

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2