General

  • Target

    NEAS.a4ea33709df3ce221d3be12e067f7c60.exe

  • Size

    462KB

  • Sample

    231031-kwe3rsdd4z

  • MD5

    a4ea33709df3ce221d3be12e067f7c60

  • SHA1

    1526904e22da7501b3cbbdaa36e3ab403606f4fe

  • SHA256

    3f5922020afc585c228569bd660271d56af1a8dc9534aebf0c624b3e090b8722

  • SHA512

    835a82030001ad761aa6b1099c28209fb7d3dc6cb774fce663ddd25c08de9ee5c9a34edebc21cb9ebdb4a613bb83382e1dedc881ad614b962812fe478a84a950

  • SSDEEP

    6144:PEK25f5ySIcWLsxIIW4DYM6SB6mwrxcvkzmSOphmH:PMpASIcWYx2U6kQnt

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      NEAS.a4ea33709df3ce221d3be12e067f7c60.exe

    • Size

      462KB

    • MD5

      a4ea33709df3ce221d3be12e067f7c60

    • SHA1

      1526904e22da7501b3cbbdaa36e3ab403606f4fe

    • SHA256

      3f5922020afc585c228569bd660271d56af1a8dc9534aebf0c624b3e090b8722

    • SHA512

      835a82030001ad761aa6b1099c28209fb7d3dc6cb774fce663ddd25c08de9ee5c9a34edebc21cb9ebdb4a613bb83382e1dedc881ad614b962812fe478a84a950

    • SSDEEP

      6144:PEK25f5ySIcWLsxIIW4DYM6SB6mwrxcvkzmSOphmH:PMpASIcWYx2U6kQnt

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks