urelas | c3205ddb25b34ef7b255ea0194daba1b09cb9c4291022e3381729706497f7e6f | Triage

Sharing

General

Target

c3205ddb25b34ef7b255ea0194daba1b09cb9c4291022e3381729706497f7e6f.exe
Size

137KB
Sample

241123-29qvvsyjap
MD5

9ef0d1b2c129a1bdbe19706c8e0486ff
SHA1

d22db33d5a93e63796653695d8e7daf7a28c4b00
SHA256

c3205ddb25b34ef7b255ea0194daba1b09cb9c4291022e3381729706497f7e6f
SHA512

826820566e88b19446c65576f559f997d5f9cb2785320c9ef4a6eaa01dc32b44774687dd492010c8de4e2db7406c053ef4a786c302ab4b51f182ad73a1624613
SSDEEP

1536:Uew08ukP5sZK20EGIBpwW6NeleEQ77nuUWXJmU2AjtH8oIHcpKZok9Hz:F0uk8QsH47nW5ptcoIHcpKZocT

Score

10^/10

urelas discovery trojan

Malware Config

Targets

- Target
  
  c3205ddb25b34ef7b255ea0194daba1b09cb9c4291022e3381729706497f7e6f.exe
- Size
  
  137KB
- MD5
  
  9ef0d1b2c129a1bdbe19706c8e0486ff
- SHA1
  
  d22db33d5a93e63796653695d8e7daf7a28c4b00
- SHA256
  
  c3205ddb25b34ef7b255ea0194daba1b09cb9c4291022e3381729706497f7e6f
- SHA512
  
  826820566e88b19446c65576f559f997d5f9cb2785320c9ef4a6eaa01dc32b44774687dd492010c8de4e2db7406c053ef4a786c302ab4b51f182ad73a1624613
- SSDEEP
  
  1536:Uew08ukP5sZK20EGIBpwW6NeleEQ77nuUWXJmU2AjtH8oIHcpKZok9Hz:F0uk8QsH47nW5ptcoIHcpKZocT
Score

10^/10

urelas discovery trojan
- Urelas
  Urelas is a trojan targeting card games.
  trojan urelas
- Urelas family
  urelas
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

urelasdiscoverytrojan

behavioral2