urelas | 4b448d094eafabc03bbc4a2f7e162b2306542084c08e1eacb716b07bcd0935ad | Triage

Sharing

General

Target

4b448d094eafabc03bbc4a2f7e162b2306542084c08e1eacb716b07bcd0935ad
Size

370KB
Sample

240630-z33jzawapg
MD5

b33392085cac871c0419f5dfe397dd88
SHA1

2d960bf4926db71fdb34d9af1e23916919e01738
SHA256

4b448d094eafabc03bbc4a2f7e162b2306542084c08e1eacb716b07bcd0935ad
SHA512

611112722e3c71fb167bbfbc2ccbff808d0c3012d7d2710b9511d84274198c75b42fcba3397c655e73d776c7b8c025b446d24e3d741e7ffd6edcc3ecd399fc8c
SSDEEP

6144:CuJkl8DV12C28tLN2/FkCO0aHftvCGCBhDOHjTPmXHk62p8:CzGL2C2aZ2/F1XaveOHjT4

Score

10^/10

urelas trojan

Malware Config

Targets

- Target
  
  4b448d094eafabc03bbc4a2f7e162b2306542084c08e1eacb716b07bcd0935ad
- Size
  
  370KB
- MD5
  
  b33392085cac871c0419f5dfe397dd88
- SHA1
  
  2d960bf4926db71fdb34d9af1e23916919e01738
- SHA256
  
  4b448d094eafabc03bbc4a2f7e162b2306542084c08e1eacb716b07bcd0935ad
- SHA512
  
  611112722e3c71fb167bbfbc2ccbff808d0c3012d7d2710b9511d84274198c75b42fcba3397c655e73d776c7b8c025b446d24e3d741e7ffd6edcc3ecd399fc8c
- SSDEEP
  
  6144:CuJkl8DV12C28tLN2/FkCO0aHftvCGCBhDOHjTPmXHk62p8:CzGL2C2aZ2/F1XaveOHjT4
Score

10^/10

urelas trojan
- Urelas
  Urelas is a trojan targeting card games.
  trojan urelas
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2