urelas | adf967410347076164af05ae7ab372b33a398c1ea45fbcb60c8af73a707f75d8 | Triage

Sharing

General

Target

adf967410347076164af05ae7ab372b33a398c1ea45fbcb60c8af73a707f75d8.exe
Size

155KB
Sample

241116-m9nceavjft
MD5

91b007423dd441899daee35f6beb1d00
SHA1

e69066fc5f71efdace9ce2bfd14a6c7154141562
SHA256

adf967410347076164af05ae7ab372b33a398c1ea45fbcb60c8af73a707f75d8
SHA512

72a236248d283667b59063012ed7067d3733986907492ca8a12d1fda7a53b8bbc073640b22516a6f288afc723209bc6fcb6d5225488dad08f49d1d0b3de1f44f
SSDEEP

3072:Ntbqvi9nMKxQbZ5x66EfACsxfcYvQd2Oe3:Nt2vsx+AV4LfLOi

Score

10^/10

urelas discovery trojan

Malware Config

Targets

- Target
  
  adf967410347076164af05ae7ab372b33a398c1ea45fbcb60c8af73a707f75d8.exe
- Size
  
  155KB
- MD5
  
  91b007423dd441899daee35f6beb1d00
- SHA1
  
  e69066fc5f71efdace9ce2bfd14a6c7154141562
- SHA256
  
  adf967410347076164af05ae7ab372b33a398c1ea45fbcb60c8af73a707f75d8
- SHA512
  
  72a236248d283667b59063012ed7067d3733986907492ca8a12d1fda7a53b8bbc073640b22516a6f288afc723209bc6fcb6d5225488dad08f49d1d0b3de1f44f
- SSDEEP
  
  3072:Ntbqvi9nMKxQbZ5x66EfACsxfcYvQd2Oe3:Nt2vsx+AV4LfLOi
Score

10^/10

urelas discovery trojan
- Urelas
  Urelas is a trojan targeting card games.
  trojan urelas
- Urelas family
  urelas
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

urelasdiscoverytrojan

behavioral2