General

  • Target

    d501721844d2f5456e38b384c72cc3fb_JC.exe

  • Size

    120KB

  • Sample

    231004-w626tsdh81

  • MD5

    d501721844d2f5456e38b384c72cc3fb

  • SHA1

    2363db1d9fc55a1eefdd18dee38b7c35aa61f66d

  • SHA256

    bcb9545a7cc5e2706ea2534d70dc6b7c25afeab6781a2aca2b74929e611945ee

  • SHA512

    d861ff561821dfa75b3b755e2a85ef4961d194140dee2853c6a48645b82c8fb99d21d1273d5d4a46036b84df72a24f5e252c103219284b89d531bb7e0bb2df58

  • SSDEEP

    1536:DVih9jjOABjWAqUffzNoBcTwE/sNW4Am8NsuPz4cnSXsWjcdy6YAiQ45F:DVSRBPCoLY5RIzNdy6YO45F

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      d501721844d2f5456e38b384c72cc3fb_JC.exe

    • Size

      120KB

    • MD5

      d501721844d2f5456e38b384c72cc3fb

    • SHA1

      2363db1d9fc55a1eefdd18dee38b7c35aa61f66d

    • SHA256

      bcb9545a7cc5e2706ea2534d70dc6b7c25afeab6781a2aca2b74929e611945ee

    • SHA512

      d861ff561821dfa75b3b755e2a85ef4961d194140dee2853c6a48645b82c8fb99d21d1273d5d4a46036b84df72a24f5e252c103219284b89d531bb7e0bb2df58

    • SSDEEP

      1536:DVih9jjOABjWAqUffzNoBcTwE/sNW4Am8NsuPz4cnSXsWjcdy6YAiQ45F:DVSRBPCoLY5RIzNdy6YO45F

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks