urelas | 69ffdb883f2fef2ef03b427283d66ea3b11b804ac30473c9f727d86fda04ec08 | Triage

Sharing

General

Target

ad9619d44f708eb0f20a1c30a91aa110N.exe
Size

370KB
Sample

240723-ngyhcashrf
MD5

ad9619d44f708eb0f20a1c30a91aa110
SHA1

e1029f562aefc8fde324163f2a05553b75f58652
SHA256

69ffdb883f2fef2ef03b427283d66ea3b11b804ac30473c9f727d86fda04ec08
SHA512

db90a586f98bd11eb120c22222829abf5dcdbcd6775a59b9b056e22694893bf9b79eb3f04ae653f1d2eb581f9933bfa790d7e22be8a0d0a7ddb20b3192f58ccc
SSDEEP

6144:CuJkl8DV12C28tLN2/FkCO0aHftvCGCBhDOHjTPmXHk62pHB:CzGL2C2aZ2/F1XaveOHjT1

Score

10^/10

urelas trojan

Malware Config

Targets

- Target
  
  ad9619d44f708eb0f20a1c30a91aa110N.exe
- Size
  
  370KB
- MD5
  
  ad9619d44f708eb0f20a1c30a91aa110
- SHA1
  
  e1029f562aefc8fde324163f2a05553b75f58652
- SHA256
  
  69ffdb883f2fef2ef03b427283d66ea3b11b804ac30473c9f727d86fda04ec08
- SHA512
  
  db90a586f98bd11eb120c22222829abf5dcdbcd6775a59b9b056e22694893bf9b79eb3f04ae653f1d2eb581f9933bfa790d7e22be8a0d0a7ddb20b3192f58ccc
- SSDEEP
  
  6144:CuJkl8DV12C28tLN2/FkCO0aHftvCGCBhDOHjTPmXHk62pHB:CzGL2C2aZ2/F1XaveOHjT1
Score

10^/10

urelas trojan
- Urelas
  Urelas is a trojan targeting card games.
  trojan urelas
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2