General

  • Target

    ee61baadb73112fe6cbffd1eee6d0150_NEAS

  • Size

    450KB

  • Sample

    240507-vzf5caae93

  • MD5

    ee61baadb73112fe6cbffd1eee6d0150

  • SHA1

    fb2235ea79d554058cffc74d55a2d50ea9fc6793

  • SHA256

    1bbbca41725271df9d9fd68954323f3c687f3594dfd4659c773b0fe1dd84801b

  • SHA512

    853055630a9b45df8b77909db5c3e3fd1f9b9c6f8858bf7c12c60c82bfbb14526b6f5f951cb7338ad2631d52bcd57e70e2b5baf173ae1e059652076627ee6220

  • SSDEEP

    6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpjdO12:oMpASIcWYx2U6hAJQnMD

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      ee61baadb73112fe6cbffd1eee6d0150_NEAS

    • Size

      450KB

    • MD5

      ee61baadb73112fe6cbffd1eee6d0150

    • SHA1

      fb2235ea79d554058cffc74d55a2d50ea9fc6793

    • SHA256

      1bbbca41725271df9d9fd68954323f3c687f3594dfd4659c773b0fe1dd84801b

    • SHA512

      853055630a9b45df8b77909db5c3e3fd1f9b9c6f8858bf7c12c60c82bfbb14526b6f5f951cb7338ad2631d52bcd57e70e2b5baf173ae1e059652076627ee6220

    • SSDEEP

      6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpjdO12:oMpASIcWYx2U6hAJQnMD

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks