General

  • Target

    d13b359ec350e9050e9897d92179f73d.exe

  • Size

    98KB

  • Sample

    240101-zhay8achd4

  • MD5

    d13b359ec350e9050e9897d92179f73d

  • SHA1

    5e2923608e41ff8cdfdf0c74563ece5e7295974b

  • SHA256

    1332372dbc8521379699554eac7cd445567340f4918cd0cb539d57d4868edc5c

  • SHA512

    0dd57b57185c3e39c658cbbdb1b4014b2d3eb77f7e25e5fdb8727ef9f84d1ca24b6d44032e75f4e271c521b018a753dcce5decce5297921a5b113895c0567e27

  • SSDEEP

    1536:OVNSf7hyk+I6412V6PMqAax80XAFSrRd4BHi:SSf9yk+U2V63XAFSrRKBHi

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.77

218.54.47.74

Targets

    • Target

      d13b359ec350e9050e9897d92179f73d.exe

    • Size

      98KB

    • MD5

      d13b359ec350e9050e9897d92179f73d

    • SHA1

      5e2923608e41ff8cdfdf0c74563ece5e7295974b

    • SHA256

      1332372dbc8521379699554eac7cd445567340f4918cd0cb539d57d4868edc5c

    • SHA512

      0dd57b57185c3e39c658cbbdb1b4014b2d3eb77f7e25e5fdb8727ef9f84d1ca24b6d44032e75f4e271c521b018a753dcce5decce5297921a5b113895c0567e27

    • SSDEEP

      1536:OVNSf7hyk+I6412V6PMqAax80XAFSrRd4BHi:SSf9yk+U2V63XAFSrRKBHi

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks