General

  • Target

    NEAS.41136901523897e48aa9862eed40a160.exe

  • Size

    382KB

  • Sample

    231013-yzs1pagf3v

  • MD5

    41136901523897e48aa9862eed40a160

  • SHA1

    4e7ff4fef254c088ee4f5d107c5ad21e0a48261c

  • SHA256

    d5e75c501b952b03a5a6745b8050f64358dfa8c22a7b2b195c0417f492b12e1a

  • SHA512

    68375c380087aaecb1799315adc75fde141366892d526d9d2eaaf711b5eaf723d3d71d3660991fbe32b2c8b32580ed9e7681251aaa367c490579263a4c59245f

  • SSDEEP

    6144:1soTOQcDCbE8qLi6mADXdJ2dcoARXDR6YZbus8Z+2vFJhcemcyOpGd:WalcDCbE8qlmx8RkeS+MJueQj

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.226

218.54.31.165

Targets

    • Target

      NEAS.41136901523897e48aa9862eed40a160.exe

    • Size

      382KB

    • MD5

      41136901523897e48aa9862eed40a160

    • SHA1

      4e7ff4fef254c088ee4f5d107c5ad21e0a48261c

    • SHA256

      d5e75c501b952b03a5a6745b8050f64358dfa8c22a7b2b195c0417f492b12e1a

    • SHA512

      68375c380087aaecb1799315adc75fde141366892d526d9d2eaaf711b5eaf723d3d71d3660991fbe32b2c8b32580ed9e7681251aaa367c490579263a4c59245f

    • SSDEEP

      6144:1soTOQcDCbE8qLi6mADXdJ2dcoARXDR6YZbus8Z+2vFJhcemcyOpGd:WalcDCbE8qlmx8RkeS+MJueQj

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks