General

  • Target

    NEAS.6cd658cb98164d99586caa0763fad050_JC.exe

  • Size

    274KB

  • Sample

    231021-w1xzxsab76

  • MD5

    6cd658cb98164d99586caa0763fad050

  • SHA1

    e4cdfb9f1c681ae574e0a573895be9c8f300f807

  • SHA256

    ad8e097c4b0d3cd787c76eccb39407d227aa398a486c5b793eca18d70dc105ae

  • SHA512

    7c49b3a0d74d4a98fff0ef57e6ce7a932762ec24b97f39189f52a4a6bcc47aaeb856dc84ca26d1b6586dbc2df7484ccdcd6b12a4b66a21d9f605d0552dac104b

  • SSDEEP

    3072:pp56zRJ83+OJ7NoGvdwWy6k04yW/KME0j1+2:pOzRWu27dlOd5W0h

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      NEAS.6cd658cb98164d99586caa0763fad050_JC.exe

    • Size

      274KB

    • MD5

      6cd658cb98164d99586caa0763fad050

    • SHA1

      e4cdfb9f1c681ae574e0a573895be9c8f300f807

    • SHA256

      ad8e097c4b0d3cd787c76eccb39407d227aa398a486c5b793eca18d70dc105ae

    • SHA512

      7c49b3a0d74d4a98fff0ef57e6ce7a932762ec24b97f39189f52a4a6bcc47aaeb856dc84ca26d1b6586dbc2df7484ccdcd6b12a4b66a21d9f605d0552dac104b

    • SSDEEP

      3072:pp56zRJ83+OJ7NoGvdwWy6k04yW/KME0j1+2:pOzRWu27dlOd5W0h

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks