urelas

General

Target

0f4b2104a845f9f9012595cd22fa822139dd457f3b4103777f4e7d27c4207ef2N.exe
Size

427KB
Sample

241222-cw6ayszmfl
MD5

cd5e1cd136c749a75236b4e9ebe04540
SHA1

c6a5e2c1074851e2ac4a820e1023e1ade015240e
SHA256

0f4b2104a845f9f9012595cd22fa822139dd457f3b4103777f4e7d27c4207ef2
SHA512

3c847064eb648190a62bad7a516d8622c1c051d855b5265fd5236f3d3d6c13b36322beb5a57b7753e512d3fb3fd8040c5f88a1b73d364ff71b75d0f872be6cad
SSDEEP

6144:WzU7blKaP2iCWhWapKRaRXOkN4Swel6f3IsInOdsG:YU7M5ijWh0XOW4sEfeOh

Score

10^/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

Targets

- Target
  
  0f4b2104a845f9f9012595cd22fa822139dd457f3b4103777f4e7d27c4207ef2N.exe
- Size
  
  427KB
- MD5
  
  cd5e1cd136c749a75236b4e9ebe04540
- SHA1
  
  c6a5e2c1074851e2ac4a820e1023e1ade015240e
- SHA256
  
  0f4b2104a845f9f9012595cd22fa822139dd457f3b4103777f4e7d27c4207ef2
- SHA512
  
  3c847064eb648190a62bad7a516d8622c1c051d855b5265fd5236f3d3d6c13b36322beb5a57b7753e512d3fb3fd8040c5f88a1b73d364ff71b75d0f872be6cad
- SSDEEP
  
  6144:WzU7blKaP2iCWhWapKRaRXOkN4Swel6f3IsInOdsG:YU7M5ijWh0XOW4sEfeOh
Score

10^/10

urelas aspackv2 discovery trojan
- Urelas
  Urelas is a trojan targeting card games.
  trojan urelas
- Urelas family
  urelas
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

2

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Urelas family

ASPack v2.12-2.42

Checks computer location settings

Deletes itself

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2