General

  • Target

    5afb31bc636d0b2df98395567be31208_JC.exe

  • Size

    97KB

  • Sample

    231011-2np2fahe7t

  • MD5

    5afb31bc636d0b2df98395567be31208

  • SHA1

    23e0515d87f15f03159e0b8c8b24916b7e992fe0

  • SHA256

    bd88f56c8503d0c523bd2983668660d51c23aa47f6745ea0a67e173c0ed98b24

  • SHA512

    cb5a1e543eda14dee65566889e9b19f4ed70edee75ba7f41994ed4165fe28b4f8bccd995d643f475c2daff9ca1cfc2a738da7ac106c7846ea5dae30166c992fd

  • SSDEEP

    768:54pt1NSf7M9Syk+IAnTjwm41tYhZV6pudcMiDh7FOaRb8RC1J3AFLT7Dm3UIn4UH:OVNSf7hyk+I6412V6PMqAax80XAFSrR1

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.77

218.54.47.74

Targets

    • Target

      5afb31bc636d0b2df98395567be31208_JC.exe

    • Size

      97KB

    • MD5

      5afb31bc636d0b2df98395567be31208

    • SHA1

      23e0515d87f15f03159e0b8c8b24916b7e992fe0

    • SHA256

      bd88f56c8503d0c523bd2983668660d51c23aa47f6745ea0a67e173c0ed98b24

    • SHA512

      cb5a1e543eda14dee65566889e9b19f4ed70edee75ba7f41994ed4165fe28b4f8bccd995d643f475c2daff9ca1cfc2a738da7ac106c7846ea5dae30166c992fd

    • SSDEEP

      768:54pt1NSf7M9Syk+IAnTjwm41tYhZV6pudcMiDh7FOaRb8RC1J3AFLT7Dm3UIn4UH:OVNSf7hyk+I6412V6PMqAax80XAFSrR1

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks