urelas | c5ca498e477c55a92617725bfb977c377bb257896925ddcb0bb658a9b09939f4 | Triage

Sharing

General

Target

c5ca498e477c55a92617725bfb977c377bb257896925ddcb0bb658a9b09939f4.exe
Size

868KB
Sample

241206-hg9ygs1jhr
MD5

e114ad9017c59a2e93648082880950ea
SHA1

009b0747726a454101fec16dbbaaa840a9e454c7
SHA256

c5ca498e477c55a92617725bfb977c377bb257896925ddcb0bb658a9b09939f4
SHA512

bc304bf8ec18f84062e31e5d1cf6108c1ae7c1fbab71ff8309d24bc0d4f0852da95a93a07f498ddfef91933f4ca1aa5c06ef1c20fb48dc0e4fd5a46e7cf1abb3
SSDEEP

12288:BO2QLxzVhdf+5utolnQux+GthLM2X4hVc+5Y+vWcg4RalJaCvHl0h9RMXlRkb:BaLza5uDugu/CIwLkJlH2h9a16b

Score

10^/10

urelas discovery trojan

Malware Config

Targets

- Target
  
  c5ca498e477c55a92617725bfb977c377bb257896925ddcb0bb658a9b09939f4.exe
- Size
  
  868KB
- MD5
  
  e114ad9017c59a2e93648082880950ea
- SHA1
  
  009b0747726a454101fec16dbbaaa840a9e454c7
- SHA256
  
  c5ca498e477c55a92617725bfb977c377bb257896925ddcb0bb658a9b09939f4
- SHA512
  
  bc304bf8ec18f84062e31e5d1cf6108c1ae7c1fbab71ff8309d24bc0d4f0852da95a93a07f498ddfef91933f4ca1aa5c06ef1c20fb48dc0e4fd5a46e7cf1abb3
- SSDEEP
  
  12288:BO2QLxzVhdf+5utolnQux+GthLM2X4hVc+5Y+vWcg4RalJaCvHl0h9RMXlRkb:BaLza5uDugu/CIwLkJlH2h9a16b
Score

10^/10

urelas discovery trojan
- Urelas
  Urelas is a trojan targeting card games.
  trojan urelas
- Urelas family
  urelas
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

urelasdiscoverytrojan

behavioral2

urelasdiscoverytrojan