General

  • Target

    NEAS.1729d58ca7e1bbfa82e145ba2ae33840.exe

  • Size

    191KB

  • Sample

    231013-ygsbfage49

  • MD5

    1729d58ca7e1bbfa82e145ba2ae33840

  • SHA1

    b7ede0c80f8d818c24f1cfac13a85bc5343c9fc2

  • SHA256

    bd28957cd5528ae2fd0e52f267d680d2998211688ef0edba0747fa95c52bd691

  • SHA512

    2e1041465e64e42b20fcf404c6a8f340a48e4a5e88cdeb11f48df0b7e225c70dcfc4324e00f3634c4861573c6e3ca9bda481ddcf62ebc05ba49458478c5c8e14

  • SSDEEP

    3072:mqp2cKm5DI/OQf6B6E8wervMLN78FWY6uGKq0FA11:m8la5aF4jMLh85Ab

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      NEAS.1729d58ca7e1bbfa82e145ba2ae33840.exe

    • Size

      191KB

    • MD5

      1729d58ca7e1bbfa82e145ba2ae33840

    • SHA1

      b7ede0c80f8d818c24f1cfac13a85bc5343c9fc2

    • SHA256

      bd28957cd5528ae2fd0e52f267d680d2998211688ef0edba0747fa95c52bd691

    • SHA512

      2e1041465e64e42b20fcf404c6a8f340a48e4a5e88cdeb11f48df0b7e225c70dcfc4324e00f3634c4861573c6e3ca9bda481ddcf62ebc05ba49458478c5c8e14

    • SSDEEP

      3072:mqp2cKm5DI/OQf6B6E8wervMLN78FWY6uGKq0FA11:m8la5aF4jMLh85Ab

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks