General

  • Target

    a1986464de7c51ae0d4f741c15e74f16_JC.exe

  • Size

    222KB

  • Sample

    231001-prnasscb95

  • MD5

    a1986464de7c51ae0d4f741c15e74f16

  • SHA1

    35fbb43cb2110df64531579c473564f3f62872b7

  • SHA256

    f9cc226bdcfc374ab6c5c79a8fac93384a6e8b69b67b7acf2bd4ccb9fb28e3af

  • SHA512

    0f85812216ae625a89f90ae22848d10a6deb487b4867431fe12ba6043879fca85c6a0b713b9441bb558a5b819f4f51f97fa2c1883abccbedc47348cf90fe4860

  • SSDEEP

    3072:WBKBy7+8pCOH1ch9ZLqrwrr58V2po8d3E:WkBy7+8pCOVi3L+w6MpRd3E

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.226

218.54.31.165

Targets

    • Target

      a1986464de7c51ae0d4f741c15e74f16_JC.exe

    • Size

      222KB

    • MD5

      a1986464de7c51ae0d4f741c15e74f16

    • SHA1

      35fbb43cb2110df64531579c473564f3f62872b7

    • SHA256

      f9cc226bdcfc374ab6c5c79a8fac93384a6e8b69b67b7acf2bd4ccb9fb28e3af

    • SHA512

      0f85812216ae625a89f90ae22848d10a6deb487b4867431fe12ba6043879fca85c6a0b713b9441bb558a5b819f4f51f97fa2c1883abccbedc47348cf90fe4860

    • SSDEEP

      3072:WBKBy7+8pCOH1ch9ZLqrwrr58V2po8d3E:WkBy7+8pCOVi3L+w6MpRd3E

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks