General

  • Target

    NEAS.97130b4a86e5bf8ef0f2ff16cdb33df0.exe

  • Size

    482KB

  • Sample

    231101-rkjp5sff96

  • MD5

    97130b4a86e5bf8ef0f2ff16cdb33df0

  • SHA1

    6bfc46c14ad3a57e4b7cd937e5eb2e134107ea5a

  • SHA256

    c6f7fca4e02d13461333cd810f9a9965f9fb381dbd19d0a0f2a425ba8d315b29

  • SHA512

    0ef0b6186b3333c5db5d7653f4282132f7fbd0af23f8192b0fec3ce0560e0c2d713196e12353ea6fdf5c4e66fbb0d946785228509cb41744a8eec477f0e3642e

  • SSDEEP

    12288:2pbvglu0agWSFnxAEwKyLH8l+O9H6s2si2XfxKTbcH:2pbXi5xzFUBaazsiofx8E

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.226

218.54.31.165

Targets

    • Target

      NEAS.97130b4a86e5bf8ef0f2ff16cdb33df0.exe

    • Size

      482KB

    • MD5

      97130b4a86e5bf8ef0f2ff16cdb33df0

    • SHA1

      6bfc46c14ad3a57e4b7cd937e5eb2e134107ea5a

    • SHA256

      c6f7fca4e02d13461333cd810f9a9965f9fb381dbd19d0a0f2a425ba8d315b29

    • SHA512

      0ef0b6186b3333c5db5d7653f4282132f7fbd0af23f8192b0fec3ce0560e0c2d713196e12353ea6fdf5c4e66fbb0d946785228509cb41744a8eec477f0e3642e

    • SSDEEP

      12288:2pbvglu0agWSFnxAEwKyLH8l+O9H6s2si2XfxKTbcH:2pbXi5xzFUBaazsiofx8E

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks