General

  • Target

    NEAS.fcfeef990e9adcdb1f849dc1c9903ab0.exe

  • Size

    355KB

  • Sample

    231101-rrdsgabd72

  • MD5

    fcfeef990e9adcdb1f849dc1c9903ab0

  • SHA1

    2c46363f64b514ebe4b0ac4f1157b9583180c861

  • SHA256

    c8f69d94ef15e08ac5c19bf6e52c0f9d38d988dc90e6d42fd5bc043809fa0573

  • SHA512

    6472b13546e73f601ea1449b5ec05b28b8a88d9cfa3a33e833702853e685cde6f8e642f763a71c3170bb505a8d45050fa12295f374b37edb63bdd8039bc18012

  • SSDEEP

    6144:q09g16vl/rOlA2//whEp0Gd1EL0F921aZL1+p9XD6UFEMk02lI1:A2Ol1//whEp0Gd1E8921UCz6cEt9q

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      NEAS.fcfeef990e9adcdb1f849dc1c9903ab0.exe

    • Size

      355KB

    • MD5

      fcfeef990e9adcdb1f849dc1c9903ab0

    • SHA1

      2c46363f64b514ebe4b0ac4f1157b9583180c861

    • SHA256

      c8f69d94ef15e08ac5c19bf6e52c0f9d38d988dc90e6d42fd5bc043809fa0573

    • SHA512

      6472b13546e73f601ea1449b5ec05b28b8a88d9cfa3a33e833702853e685cde6f8e642f763a71c3170bb505a8d45050fa12295f374b37edb63bdd8039bc18012

    • SSDEEP

      6144:q09g16vl/rOlA2//whEp0Gd1EL0F921aZL1+p9XD6UFEMk02lI1:A2Ol1//whEp0Gd1E8921UCz6cEt9q

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks