General

  • Target

    NEAS.d03af095074486e27cff72e93bbcfb30.exe

  • Size

    166KB

  • Sample

    231105-2na8aaea3v

  • MD5

    d03af095074486e27cff72e93bbcfb30

  • SHA1

    94e04ca9a5da0ae09cb8702e6a46640f53e3d290

  • SHA256

    d62f7cc25b27ab6220740f062e147be5bb78d0762d80f0aef60bc5f91403b9f1

  • SHA512

    5cff95c8d18a33e2aa04edbfa035c1d2ad656b06d95536b8f88a47940300b7ee956f01fba13fdfd322d4d8c57323dad087042217ee8071efbe2910b3bf01a139

  • SSDEEP

    1536:eADO0Wbt1931D2P7BWLQ4zR4LUKMcPHFE3HP/GTW65CGEEHpWYPyI:eADO0Wc7UJ6LZMaHLW65DE8pWM5

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.208

112.175.88.207

Targets

    • Target

      NEAS.d03af095074486e27cff72e93bbcfb30.exe

    • Size

      166KB

    • MD5

      d03af095074486e27cff72e93bbcfb30

    • SHA1

      94e04ca9a5da0ae09cb8702e6a46640f53e3d290

    • SHA256

      d62f7cc25b27ab6220740f062e147be5bb78d0762d80f0aef60bc5f91403b9f1

    • SHA512

      5cff95c8d18a33e2aa04edbfa035c1d2ad656b06d95536b8f88a47940300b7ee956f01fba13fdfd322d4d8c57323dad087042217ee8071efbe2910b3bf01a139

    • SSDEEP

      1536:eADO0Wbt1931D2P7BWLQ4zR4LUKMcPHFE3HP/GTW65CGEEHpWYPyI:eADO0Wc7UJ6LZMaHLW65DE8pWM5

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks