urelas | 293eeedb32e6129fb148455d5027117539456d767e898baba9b2549abee17913 | Triage

Sharing

General

Target

293eeedb32e6129fb148455d5027117539456d767e898baba9b2549abee17913
Size

58KB
Sample

240621-ygz2aavarq
MD5

69f61954dc6135d6aba3417742f0b73c
SHA1

127bcff9611f2449e8fd84cd93e8672b1862bd0c
SHA256

293eeedb32e6129fb148455d5027117539456d767e898baba9b2549abee17913
SHA512

ba47712fafd18e8755ec2af667e86a4b5d466210cbe0b959da9f88a7d3d61804f2e3a07c2de16ac7398c82cd7a04b1cc9bbddb93928fed999540235162cb32b2
SSDEEP

1536:l7X2lykmUO2drIYfdQ3W8PTZEd4Ejf/kE/Q6mhnDxMmKy6:VXmykmU9If3h1O4Eb/eOX

Score

10^/10

urelas trojan

Malware Config

Extracted

Family

urelas

C2

112.175.88.208

112.175.88.207

Targets

- Target
  
  293eeedb32e6129fb148455d5027117539456d767e898baba9b2549abee17913
- Size
  
  58KB
- MD5
  
  69f61954dc6135d6aba3417742f0b73c
- SHA1
  
  127bcff9611f2449e8fd84cd93e8672b1862bd0c
- SHA256
  
  293eeedb32e6129fb148455d5027117539456d767e898baba9b2549abee17913
- SHA512
  
  ba47712fafd18e8755ec2af667e86a4b5d466210cbe0b959da9f88a7d3d61804f2e3a07c2de16ac7398c82cd7a04b1cc9bbddb93928fed999540235162cb32b2
- SSDEEP
  
  1536:l7X2lykmUO2drIYfdQ3W8PTZEd4Ejf/kE/Q6mhnDxMmKy6:VXmykmU9If3h1O4Eb/eOX
Score

10^/10

urelas trojan
- Urelas
  Urelas is a trojan targeting card games.
  trojan urelas
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2