General

  • Target

    NEAS.78724ec003ab9d19102892967900a950.exe

  • Size

    140KB

  • Sample

    231106-bl3lmsfc7x

  • MD5

    78724ec003ab9d19102892967900a950

  • SHA1

    d13330228e37b2e31295115dfd6a6f36ced76f65

  • SHA256

    70202ad057751a030d58d4e19c7d6e28b3c655948f38f549d623ca13bb83d303

  • SHA512

    08d26a510730a87e54f839647c23ed51f4c67dc13194654c8a2447e3e021c10303aec088e9254e619f169fed3587437bdef9086eafd629cd88a48f1fa4c202d6

  • SSDEEP

    1536:2xo3t29IAhUANTAfLocwaIG0rByDDqG+UKLnuvUYY9TRWEhVnLaMjF04q0JEGhM0:J8VUcTAWG8HGCnuvqTAGdXqQ60

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      NEAS.78724ec003ab9d19102892967900a950.exe

    • Size

      140KB

    • MD5

      78724ec003ab9d19102892967900a950

    • SHA1

      d13330228e37b2e31295115dfd6a6f36ced76f65

    • SHA256

      70202ad057751a030d58d4e19c7d6e28b3c655948f38f549d623ca13bb83d303

    • SHA512

      08d26a510730a87e54f839647c23ed51f4c67dc13194654c8a2447e3e021c10303aec088e9254e619f169fed3587437bdef9086eafd629cd88a48f1fa4c202d6

    • SSDEEP

      1536:2xo3t29IAhUANTAfLocwaIG0rByDDqG+UKLnuvUYY9TRWEhVnLaMjF04q0JEGhM0:J8VUcTAWG8HGCnuvqTAGdXqQ60

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks