urelas | 6edf4b4fd4c9444373d4cc6a9d1022a174c7088361c7212d5e7877eb030d150c | Triage

Sharing

General

Target

8b539a06f73be7631c06097dd2537e00N.exe
Size

154KB
Sample

240731-jjvf9atglj
MD5

8b539a06f73be7631c06097dd2537e00
SHA1

465f3410bf356c5d1cacc35137722a2096e2a4a3
SHA256

6edf4b4fd4c9444373d4cc6a9d1022a174c7088361c7212d5e7877eb030d150c
SHA512

9223f280ef96221a827bad46c882d2c64db08aed65c1c8426988948119cba803730f7936548768c7d030e3579f04057a6e2a7a319b24e2967d3a6d28b3c901c8
SSDEEP

3072:Ntbqvi9nMKxQbZ5x66EfACsxfcYvQd2Oew:Nt2vsx+AV4LfLOD

Score

10^/10

urelas discovery trojan

Malware Config

Targets

- Target
  
  8b539a06f73be7631c06097dd2537e00N.exe
- Size
  
  154KB
- MD5
  
  8b539a06f73be7631c06097dd2537e00
- SHA1
  
  465f3410bf356c5d1cacc35137722a2096e2a4a3
- SHA256
  
  6edf4b4fd4c9444373d4cc6a9d1022a174c7088361c7212d5e7877eb030d150c
- SHA512
  
  9223f280ef96221a827bad46c882d2c64db08aed65c1c8426988948119cba803730f7936548768c7d030e3579f04057a6e2a7a319b24e2967d3a6d28b3c901c8
- SSDEEP
  
  3072:Ntbqvi9nMKxQbZ5x66EfACsxfcYvQd2Oew:Nt2vsx+AV4LfLOD
Score

10^/10

urelas discovery trojan
- Urelas
  Urelas is a trojan targeting card games.
  trojan urelas
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

urelasdiscoverytrojan

behavioral2