General

  • Target

    NEAS.7a214f41784041a7efdc16fc08222be0.exe

  • Size

    315KB

  • Sample

    231101-e5ewgace54

  • MD5

    7a214f41784041a7efdc16fc08222be0

  • SHA1

    fc652e71abbbc553505ade9f98103bfcedc6f057

  • SHA256

    6ba2c3b7f5a0b96cf016e92eac18de078ab9a313a89a6a68ca60d07e0faf2e99

  • SHA512

    777e81c915ee0472249dea8d9e278648c179f000b0c482c46f11c434828210b666077d8c92ea8c21c31e47ca09b3a0e4561f213c1c8820c6410dc33f73cdb13d

  • SSDEEP

    6144:HIJsyBGAEiQPBVRzPivYJoBuYXb94oIMdd8vfZ50Mhibw4OiT:BVAWNDTJHq9DIMTW8c1iT

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.226

218.54.31.165

Targets

    • Target

      NEAS.7a214f41784041a7efdc16fc08222be0.exe

    • Size

      315KB

    • MD5

      7a214f41784041a7efdc16fc08222be0

    • SHA1

      fc652e71abbbc553505ade9f98103bfcedc6f057

    • SHA256

      6ba2c3b7f5a0b96cf016e92eac18de078ab9a313a89a6a68ca60d07e0faf2e99

    • SHA512

      777e81c915ee0472249dea8d9e278648c179f000b0c482c46f11c434828210b666077d8c92ea8c21c31e47ca09b3a0e4561f213c1c8820c6410dc33f73cdb13d

    • SSDEEP

      6144:HIJsyBGAEiQPBVRzPivYJoBuYXb94oIMdd8vfZ50Mhibw4OiT:BVAWNDTJHq9DIMTW8c1iT

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks