urelas | 89ed2ff188c84fc98fa5aec6914dc96d5e480bc6a1160050aa89cbbdd822e890 | Triage

Sharing

General

Target

3bfb0560881a2192e0e5822998cf9a90N.exe
Size

370KB
Sample

240801-e2dh8swelb
MD5

3bfb0560881a2192e0e5822998cf9a90
SHA1

3a06ebd6131a6b7e4005be6621cb3a0abe91e631
SHA256

89ed2ff188c84fc98fa5aec6914dc96d5e480bc6a1160050aa89cbbdd822e890
SHA512

73e9c6f30878277929d2271255b3a808316bd3cac353a402c24eea5be6b9ea023e8faff469dad75b2c44d2ab5116514d5239f97b0d03de916f471caf95e6663d
SSDEEP

6144:CuJkl8DV12C28tLN2/FkCOfHVm0fMaHftvCGCBhDOHjTPmXHk62pi/:CzGL2C2aZ2/F1WHHUaveOHjTe/

Score

10^/10

urelas discovery trojan

Malware Config

Targets

- Target
  
  3bfb0560881a2192e0e5822998cf9a90N.exe
- Size
  
  370KB
- MD5
  
  3bfb0560881a2192e0e5822998cf9a90
- SHA1
  
  3a06ebd6131a6b7e4005be6621cb3a0abe91e631
- SHA256
  
  89ed2ff188c84fc98fa5aec6914dc96d5e480bc6a1160050aa89cbbdd822e890
- SHA512
  
  73e9c6f30878277929d2271255b3a808316bd3cac353a402c24eea5be6b9ea023e8faff469dad75b2c44d2ab5116514d5239f97b0d03de916f471caf95e6663d
- SSDEEP
  
  6144:CuJkl8DV12C28tLN2/FkCOfHVm0fMaHftvCGCBhDOHjTPmXHk62pi/:CzGL2C2aZ2/F1WHHUaveOHjTe/
Score

10^/10

urelas discovery trojan
- Urelas
  Urelas is a trojan targeting card games.
  trojan urelas
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

urelasdiscoverytrojan

behavioral2