General

  • Target

    NEAS.64219ad662dbd1dad82d109d6056fda0.exe

  • Size

    59KB

  • Sample

    231028-ym477ahg38

  • MD5

    64219ad662dbd1dad82d109d6056fda0

  • SHA1

    9af2800756b2fe3e49c020489f60141f76908cfc

  • SHA256

    67cd7b814781673c06da1caf646a7ff7322cc9d3a8b30689dce8c20348ecb7a2

  • SHA512

    1d3380f2f79f8f04a842e114aeb2115dedc2cd47e29bd0d5bf776b5517491e04acb734f7d032d7402a548e6f9d4a04f65032f07b509664bcc54cb233e0aee3bb

  • SSDEEP

    1536:JighKR+xql155X6CEVgYndCeTtLII4toUp7C:hEhl15cCmDt8I4I

Score
10/10

Malware Config

Extracted

Family

urelas

C2

121.88.5.184

Targets

    • Target

      NEAS.64219ad662dbd1dad82d109d6056fda0.exe

    • Size

      59KB

    • MD5

      64219ad662dbd1dad82d109d6056fda0

    • SHA1

      9af2800756b2fe3e49c020489f60141f76908cfc

    • SHA256

      67cd7b814781673c06da1caf646a7ff7322cc9d3a8b30689dce8c20348ecb7a2

    • SHA512

      1d3380f2f79f8f04a842e114aeb2115dedc2cd47e29bd0d5bf776b5517491e04acb734f7d032d7402a548e6f9d4a04f65032f07b509664bcc54cb233e0aee3bb

    • SSDEEP

      1536:JighKR+xql155X6CEVgYndCeTtLII4toUp7C:hEhl15cCmDt8I4I

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks