urelas | 78aeef8587aa0b02578525edd61a294079f674f0eb75c766f0741fed0f06ba93 | Triage

Sharing

General

Target

78aeef8587aa0b02578525edd61a294079f674f0eb75c766f0741fed0f06ba93
Size

94KB
Sample

240618-2ys6vasgmq
MD5

3121f8930cb0e5744b1840e92e33737d
SHA1

385361bc3174d7492a218c2b2ad939661633b931
SHA256

78aeef8587aa0b02578525edd61a294079f674f0eb75c766f0741fed0f06ba93
SHA512

720d14fc8a420bb3a8738eeab80d59a538471c5c6fb2d707e81499593237ba519329cded2e2b284024e7b337c4dad19ed6c139620349d205ce5a5004dd0d5bf6
SSDEEP

1536:h7OvGm5eIEV6BJNEOk10Q6iYHmlmUO/+oRhjv3eLFJA1a:h7JmwILKr10y2p92JLF4a

Score

10^/10

urelas trojan

Malware Config

Extracted

Family

urelas

C2

112.175.88.208

112.175.88.209

112.175.88.207

Targets

- Target
  
  78aeef8587aa0b02578525edd61a294079f674f0eb75c766f0741fed0f06ba93
- Size
  
  94KB
- MD5
  
  3121f8930cb0e5744b1840e92e33737d
- SHA1
  
  385361bc3174d7492a218c2b2ad939661633b931
- SHA256
  
  78aeef8587aa0b02578525edd61a294079f674f0eb75c766f0741fed0f06ba93
- SHA512
  
  720d14fc8a420bb3a8738eeab80d59a538471c5c6fb2d707e81499593237ba519329cded2e2b284024e7b337c4dad19ed6c139620349d205ce5a5004dd0d5bf6
- SSDEEP
  
  1536:h7OvGm5eIEV6BJNEOk10Q6iYHmlmUO/+oRhjv3eLFJA1a:h7JmwILKr10y2p92JLF4a
Score

10^/10

urelas trojan
- Urelas
  Urelas is a trojan targeting card games.
  trojan urelas
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2