General

  • Target

    4c9e1442b5b4a25515397c8130fbd760_NEAS

  • Size

    91KB

  • Sample

    240507-m14m2aff64

  • MD5

    4c9e1442b5b4a25515397c8130fbd760

  • SHA1

    1411b42c9845b3ba2d6896e8c5f59ab877c8723d

  • SHA256

    f96e8ddc0f5d1b330aea957d214eff6f0c6c0f5e70b63dfa45730b80e192c0dc

  • SHA512

    c2bd7ca8896a6549efac1dd7ef1263d24a3f7347d85bc8401c939d657a218ba19444517a53193031a613ac166ab749660b94da2c97108c00ba62dfcd2f92ed3b

  • SSDEEP

    1536:AQ38vsm02LMSTz2u/DBP4EXfpoggoKrKDnzely4:Aha2B2u7dPfVVKr4nzeX

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.28.139

121.88.5.183

Targets

    • Target

      4c9e1442b5b4a25515397c8130fbd760_NEAS

    • Size

      91KB

    • MD5

      4c9e1442b5b4a25515397c8130fbd760

    • SHA1

      1411b42c9845b3ba2d6896e8c5f59ab877c8723d

    • SHA256

      f96e8ddc0f5d1b330aea957d214eff6f0c6c0f5e70b63dfa45730b80e192c0dc

    • SHA512

      c2bd7ca8896a6549efac1dd7ef1263d24a3f7347d85bc8401c939d657a218ba19444517a53193031a613ac166ab749660b94da2c97108c00ba62dfcd2f92ed3b

    • SSDEEP

      1536:AQ38vsm02LMSTz2u/DBP4EXfpoggoKrKDnzely4:Aha2B2u7dPfVVKr4nzeX

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks