urelas | e9e360ca2074f2088b268a84e38ce13b667ca4644994a6a79ef0aeb9dd4fdf46 | Triage

Sharing

General

Target

e9e360ca2074f2088b268a84e38ce13b667ca4644994a6a79ef0aeb9dd4fdf46.exe
Size

155KB
Sample

241117-zqfjnsyanc
MD5

90c0275890ec347277440d6cae5d71d8
SHA1

09c1867f5f59af08c422340077b13309b7eebbdf
SHA256

e9e360ca2074f2088b268a84e38ce13b667ca4644994a6a79ef0aeb9dd4fdf46
SHA512

468262091c2abdb701b46d0677e49ad1bc86567d81d86b2fb173e337c0a4b391b4b5e35962db3e15adff33f466c1735d97572494a7cdc4ef6f23ee62fbf5ec7b
SSDEEP

3072:Ntbqvi9nMKxQbZ5x66EfACsxfcYvQd2Oe1:Nt2vsx+AV4LfLO2

Score

10^/10

urelas discovery trojan

Malware Config

Targets

- Target
  
  e9e360ca2074f2088b268a84e38ce13b667ca4644994a6a79ef0aeb9dd4fdf46.exe
- Size
  
  155KB
- MD5
  
  90c0275890ec347277440d6cae5d71d8
- SHA1
  
  09c1867f5f59af08c422340077b13309b7eebbdf
- SHA256
  
  e9e360ca2074f2088b268a84e38ce13b667ca4644994a6a79ef0aeb9dd4fdf46
- SHA512
  
  468262091c2abdb701b46d0677e49ad1bc86567d81d86b2fb173e337c0a4b391b4b5e35962db3e15adff33f466c1735d97572494a7cdc4ef6f23ee62fbf5ec7b
- SSDEEP
  
  3072:Ntbqvi9nMKxQbZ5x66EfACsxfcYvQd2Oe1:Nt2vsx+AV4LfLO2
Score

10^/10

urelas discovery trojan
- Urelas
  Urelas is a trojan targeting card games.
  trojan urelas
- Urelas family
  urelas
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

urelasdiscoverytrojan

behavioral2