General

  • Target

    NEAS.61bcdecb8b0f077763af79fd1fd85eb0_JC.exe

  • Size

    166KB

  • Sample

    231023-xxp1ksdc9y

  • MD5

    61bcdecb8b0f077763af79fd1fd85eb0

  • SHA1

    99cae9923e3abcf9a14d711fed36c85effd59301

  • SHA256

    9101d1071be9e7276068c9fd932a10fd200aba6189676bd5483ef2302c772894

  • SHA512

    a9cd912c3d913770900c3cec08e3800f3893cca3f9684d9fc5af5a0ab6bf1884172491af8b45ef25350c4d35c0facdd4ffc657e6a054cfd3390f82e578849167

  • SSDEEP

    1536:4INb5b8WoWwACLU2/dpWbHo7dVLoUaFKcq3ePuHCg65dCo74mTrm:4ITb8WgdcknLo5Fhg65woFi

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      NEAS.61bcdecb8b0f077763af79fd1fd85eb0_JC.exe

    • Size

      166KB

    • MD5

      61bcdecb8b0f077763af79fd1fd85eb0

    • SHA1

      99cae9923e3abcf9a14d711fed36c85effd59301

    • SHA256

      9101d1071be9e7276068c9fd932a10fd200aba6189676bd5483ef2302c772894

    • SHA512

      a9cd912c3d913770900c3cec08e3800f3893cca3f9684d9fc5af5a0ab6bf1884172491af8b45ef25350c4d35c0facdd4ffc657e6a054cfd3390f82e578849167

    • SSDEEP

      1536:4INb5b8WoWwACLU2/dpWbHo7dVLoUaFKcq3ePuHCg65dCo74mTrm:4ITb8WgdcknLo5Fhg65woFi

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks