urelas | a90191bcd4c952c26f0b92a2872303fd3c7e97e0e7473ee882e8d490741d6307 | Triage

Sharing

General

Target

e1a2c6df63912e750f762a181afcdc20N.exe
Size

154KB
Sample

240804-e34rtawejl
MD5

e1a2c6df63912e750f762a181afcdc20
SHA1

9f4e4cff8cab60b06b8d37dc1a866009d4c17192
SHA256

a90191bcd4c952c26f0b92a2872303fd3c7e97e0e7473ee882e8d490741d6307
SHA512

dbf20c49844bb2c028b729ee6aa1aae38e35ed6c9a31cbcfbe15f686703daf9ca6a2bfcccc8a7ba9731c650db3d3f09faf3008ff16eebd75a49d272e8d0416f6
SSDEEP

3072:Ntbqvi9nMKxQbZ5x66EfACsxfcYvQd2Oep:Nt2vsx+AV4LfLOi

Score

10^/10

urelas discovery trojan

Malware Config

Targets

- Target
  
  e1a2c6df63912e750f762a181afcdc20N.exe
- Size
  
  154KB
- MD5
  
  e1a2c6df63912e750f762a181afcdc20
- SHA1
  
  9f4e4cff8cab60b06b8d37dc1a866009d4c17192
- SHA256
  
  a90191bcd4c952c26f0b92a2872303fd3c7e97e0e7473ee882e8d490741d6307
- SHA512
  
  dbf20c49844bb2c028b729ee6aa1aae38e35ed6c9a31cbcfbe15f686703daf9ca6a2bfcccc8a7ba9731c650db3d3f09faf3008ff16eebd75a49d272e8d0416f6
- SSDEEP
  
  3072:Ntbqvi9nMKxQbZ5x66EfACsxfcYvQd2Oep:Nt2vsx+AV4LfLOi
Score

10^/10

urelas discovery trojan
- Urelas
  Urelas is a trojan targeting card games.
  trojan urelas
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

urelasdiscoverytrojan

behavioral2