General

  • Target

    NEAS.de7bacc28ca752676e4fc165f4a5cf72_JC.exe

  • Size

    486KB

  • Sample

    231014-n65yqaff77

  • MD5

    de7bacc28ca752676e4fc165f4a5cf72

  • SHA1

    6f2ab2ee931ba30ddaaa3d784f7fa36a40b1650c

  • SHA256

    cdaf1701e26119bf1682b060842bfd5b8fa42a9d97aac0c42b8059365007ddc5

  • SHA512

    f0c1b0a5a974f4142409ca45f5c8234094dbab5eebbe9c1e6d70b84a5d5b8758d7cafc4f5b9ae2095300c86d24b5f03774dbd16895b2fe43ad610a139f9774c6

  • SSDEEP

    12288:30HPhglq2Uyt4R/7AR76o/RBpL133AdxF7t:30v/k4lkQ+RBphmxL

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

Targets

    • Target

      NEAS.de7bacc28ca752676e4fc165f4a5cf72_JC.exe

    • Size

      486KB

    • MD5

      de7bacc28ca752676e4fc165f4a5cf72

    • SHA1

      6f2ab2ee931ba30ddaaa3d784f7fa36a40b1650c

    • SHA256

      cdaf1701e26119bf1682b060842bfd5b8fa42a9d97aac0c42b8059365007ddc5

    • SHA512

      f0c1b0a5a974f4142409ca45f5c8234094dbab5eebbe9c1e6d70b84a5d5b8758d7cafc4f5b9ae2095300c86d24b5f03774dbd16895b2fe43ad610a139f9774c6

    • SSDEEP

      12288:30HPhglq2Uyt4R/7AR76o/RBpL133AdxF7t:30v/k4lkQ+RBphmxL

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks