General

  • Target

    dec4f95dfc318c450b86cf1ca78397569d3bf2195277bbd93df2a49b53bf98c6

  • Size

    438KB

  • Sample

    240420-ecx7cagd61

  • MD5

    b8600d0d332e2007286e128210b2d72b

  • SHA1

    6c691bd0c6bbcad87c4bd8c764ebb4963cecf740

  • SHA256

    dec4f95dfc318c450b86cf1ca78397569d3bf2195277bbd93df2a49b53bf98c6

  • SHA512

    cc96856410f708f0395dcdc8dae68ed608856c5bd3b2f65cd4f09ce7d63749852b467da504389d26e6fdd6bcab24ee78a39321ca3919465c136a98dd4e4f0a45

  • SSDEEP

    6144:4l/xT038JxNpgI0t2eLlPmWfus4eLLx0HMOizIYxjSlP8tiwkeesZBYWEY:4lN03AHgPZfus4eLLoMOiMYxe8YJWn

Score
10/10

Malware Config

Targets

    • Target

      dec4f95dfc318c450b86cf1ca78397569d3bf2195277bbd93df2a49b53bf98c6

    • Size

      438KB

    • MD5

      b8600d0d332e2007286e128210b2d72b

    • SHA1

      6c691bd0c6bbcad87c4bd8c764ebb4963cecf740

    • SHA256

      dec4f95dfc318c450b86cf1ca78397569d3bf2195277bbd93df2a49b53bf98c6

    • SHA512

      cc96856410f708f0395dcdc8dae68ed608856c5bd3b2f65cd4f09ce7d63749852b467da504389d26e6fdd6bcab24ee78a39321ca3919465c136a98dd4e4f0a45

    • SSDEEP

      6144:4l/xT038JxNpgI0t2eLlPmWfus4eLLx0HMOizIYxjSlP8tiwkeesZBYWEY:4lN03AHgPZfus4eLLoMOiMYxe8YJWn

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Tasks