General

  • Target

    NEAS.c180cbe1ce8ce2f4e1b5feec30c21bd0.exe

  • Size

    410KB

  • Sample

    231013-zew3aafd3z

  • MD5

    c180cbe1ce8ce2f4e1b5feec30c21bd0

  • SHA1

    e4d2f862639542de837454be2600ef4bef508a07

  • SHA256

    a07fd6ba88218926ff6ececb4fb059b1960c5b5ddea5f9c27ef09fbd315ae5cc

  • SHA512

    3da743a260faa49ab0fb99bf7846de3f392715990759df8e3a38aae8974b29195958ba9dd90ac009de2a5f28fda0e0d133c43bc8bcad183d1e60b0b405c91dbb

  • SSDEEP

    6144:bzwArTEDSCs5wL0DKlpn/URBudL7qRBpkvfsModogZ/SvnDTH950w:bMmQDSCs5wo0e8L7qRbQUugennHZ

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.226

218.54.31.165

Targets

    • Target

      NEAS.c180cbe1ce8ce2f4e1b5feec30c21bd0.exe

    • Size

      410KB

    • MD5

      c180cbe1ce8ce2f4e1b5feec30c21bd0

    • SHA1

      e4d2f862639542de837454be2600ef4bef508a07

    • SHA256

      a07fd6ba88218926ff6ececb4fb059b1960c5b5ddea5f9c27ef09fbd315ae5cc

    • SHA512

      3da743a260faa49ab0fb99bf7846de3f392715990759df8e3a38aae8974b29195958ba9dd90ac009de2a5f28fda0e0d133c43bc8bcad183d1e60b0b405c91dbb

    • SSDEEP

      6144:bzwArTEDSCs5wL0DKlpn/URBudL7qRBpkvfsModogZ/SvnDTH950w:bMmQDSCs5wo0e8L7qRbQUugennHZ

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks