General

  • Target

    NEAS.cc8071267a830c96c9b12ba6eca48ba0_JC.exe

  • Size

    124KB

  • Sample

    231101-2ejs3aff24

  • MD5

    cc8071267a830c96c9b12ba6eca48ba0

  • SHA1

    4e9f68d45803ddef0a87afbe04603535259c4b3e

  • SHA256

    2014ed28492f959fd0dd8e61a4b418ba6273c6748b7c5b2a333315f7ff86923e

  • SHA512

    4803d28d18c0a7ec9bcd78e606c9d39b53aefe21b52e9562599b33b513633672531a0d3d9b561c057b1b37647c6554b50f126dd4a7bcb4e071677ebc8406caba

  • SSDEEP

    1536:3C+ltNKIxyDjxxNA6vOOZsBLD/qMJEAhHmRYHE7mqfm0ym:3C+ltUIs9pO9/jj8YKmg

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.208

112.175.88.207

Targets

    • Target

      NEAS.cc8071267a830c96c9b12ba6eca48ba0_JC.exe

    • Size

      124KB

    • MD5

      cc8071267a830c96c9b12ba6eca48ba0

    • SHA1

      4e9f68d45803ddef0a87afbe04603535259c4b3e

    • SHA256

      2014ed28492f959fd0dd8e61a4b418ba6273c6748b7c5b2a333315f7ff86923e

    • SHA512

      4803d28d18c0a7ec9bcd78e606c9d39b53aefe21b52e9562599b33b513633672531a0d3d9b561c057b1b37647c6554b50f126dd4a7bcb4e071677ebc8406caba

    • SSDEEP

      1536:3C+ltNKIxyDjxxNA6vOOZsBLD/qMJEAhHmRYHE7mqfm0ym:3C+ltUIs9pO9/jj8YKmg

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks