General

  • Target

    NEAS.05554556b58761e45cfe7e3fbee4dd80_JC.exe

  • Size

    418KB

  • Sample

    231012-tcjraaaa5y

  • MD5

    05554556b58761e45cfe7e3fbee4dd80

  • SHA1

    f3f8b0f26fb4457db1ae417753cf67ec35c80ec7

  • SHA256

    535f2ff8292f1f2d152749caea268970564651bda90794101801691ec8ad5276

  • SHA512

    b74839a78e05203431b1c3225305627fe8a9015f96d9304b941946bdc72bd63068592a1c1ea06a44747c4bd07f82543ec27fb6756027acb761b348e73e62f673

  • SSDEEP

    6144:XxiqjFBwbGbGQfkOuuGDblGE2OeMfqP3mOa2cBlBPAsE+:XhjQK3f/utLeMfBnBc+

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      NEAS.05554556b58761e45cfe7e3fbee4dd80_JC.exe

    • Size

      418KB

    • MD5

      05554556b58761e45cfe7e3fbee4dd80

    • SHA1

      f3f8b0f26fb4457db1ae417753cf67ec35c80ec7

    • SHA256

      535f2ff8292f1f2d152749caea268970564651bda90794101801691ec8ad5276

    • SHA512

      b74839a78e05203431b1c3225305627fe8a9015f96d9304b941946bdc72bd63068592a1c1ea06a44747c4bd07f82543ec27fb6756027acb761b348e73e62f673

    • SSDEEP

      6144:XxiqjFBwbGbGQfkOuuGDblGE2OeMfqP3mOa2cBlBPAsE+:XhjQK3f/utLeMfBnBc+

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks