General

  • Target

    NEAS.0eb742b08505fb81f676b46a82a5dfd0_JC.exe

  • Size

    78KB

  • Sample

    231103-ckmdpsce24

  • MD5

    0eb742b08505fb81f676b46a82a5dfd0

  • SHA1

    92458c36ed1aafcd9378341d5ebbe22e7395959c

  • SHA256

    9068630b263e18236df12d3b495e807072e84e703dcd47500723f02177e47b67

  • SHA512

    4b924ff0323cdd928acdbdf8611a4dba0612908ff26d073a757a532ecb3e866dea74bf819dd847e7222e76b44b53b55e74206140c85219cae8798cf1444f1318

  • SSDEEP

    1536:zxKyhnAUfUiZR9G84qk+Be/HZ17hmZp2P:zLCEZTGx5180

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.28.139

121.88.5.183

Targets

    • Target

      NEAS.0eb742b08505fb81f676b46a82a5dfd0_JC.exe

    • Size

      78KB

    • MD5

      0eb742b08505fb81f676b46a82a5dfd0

    • SHA1

      92458c36ed1aafcd9378341d5ebbe22e7395959c

    • SHA256

      9068630b263e18236df12d3b495e807072e84e703dcd47500723f02177e47b67

    • SHA512

      4b924ff0323cdd928acdbdf8611a4dba0612908ff26d073a757a532ecb3e866dea74bf819dd847e7222e76b44b53b55e74206140c85219cae8798cf1444f1318

    • SSDEEP

      1536:zxKyhnAUfUiZR9G84qk+Be/HZ17hmZp2P:zLCEZTGx5180

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks