General

  • Target

    23003411cdeedd39d7820878550b18d0_exe32_JC.exe

  • Size

    243KB

  • Sample

    231015-w54y2acc62

  • MD5

    23003411cdeedd39d7820878550b18d0

  • SHA1

    28a4cdb7b9e442081a4e5258fe0712dd4c2049c0

  • SHA256

    2b13c9c689888db544d3581924c25f54df1d43a22e0f1947145229bc99f66b2e

  • SHA512

    256bab332babd9732e785e904e9265ed93a6feadf48a38568ea1621b74393d205bd080c5cad1d910b77431ba22c49454c1078ee2384ce00d23d58e5a29308c05

  • SSDEEP

    3072:YYB4Qlayj4kOLH7yUzOu376z6zODggW9VzzOninjdJpHu:5yQlayj4vLmar6zFVWjzzPRJpHu

Score
10/10

Malware Config

Extracted

Family

urelas

C2

121.88.5.184

Targets

    • Target

      23003411cdeedd39d7820878550b18d0_exe32_JC.exe

    • Size

      243KB

    • MD5

      23003411cdeedd39d7820878550b18d0

    • SHA1

      28a4cdb7b9e442081a4e5258fe0712dd4c2049c0

    • SHA256

      2b13c9c689888db544d3581924c25f54df1d43a22e0f1947145229bc99f66b2e

    • SHA512

      256bab332babd9732e785e904e9265ed93a6feadf48a38568ea1621b74393d205bd080c5cad1d910b77431ba22c49454c1078ee2384ce00d23d58e5a29308c05

    • SSDEEP

      3072:YYB4Qlayj4kOLH7yUzOu376z6zODggW9VzzOninjdJpHu:5yQlayj4vLmar6zFVWjzzPRJpHu

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks