Overview

overview

10

Static

static

10

f03535ae3b...bb.exe

windows7-x64

10

f03535ae3b...bb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f03535ae3becd1dd0b531f945b5667579a3a28ed97c779c83c480118bb6f0abb

  • Size

    93KB

  • Sample

    240617-ef443ashlh

  • MD5

    3e2d1f232c5a6ba7c01b891716e9c4bb

  • SHA1

    61d535cce9c81f45a1ef54e9323fc3be2fa899e3

  • SHA256

    f03535ae3becd1dd0b531f945b5667579a3a28ed97c779c83c480118bb6f0abb

  • SHA512

    0c7e3e619d1a4b8bd29bafbf885a2428efabb73c072dddae86c9463b80699380b4febfa8e007f3f6f48cba3db63ac2b6064c1a6f3c4e2402ffa0fbf5c6e1b05a

  • SSDEEP

    768:54pt1NSf7M9Syk+IAnTjwm41tYhZV6pudcMiDh7FOaRb8RC1J3AFLT7Dm3UIn4U+:OVNSf7hyk+I6412V6PMqAax80XAFSrRo

Score
10/10
urelastrojan

Malware Config

Extracted

Family

urelas

C2

218.54.47.77

218.54.47.74

Targets

    • Target

      f03535ae3becd1dd0b531f945b5667579a3a28ed97c779c83c480118bb6f0abb

    • Size

      93KB

    • MD5

      3e2d1f232c5a6ba7c01b891716e9c4bb

    • SHA1

      61d535cce9c81f45a1ef54e9323fc3be2fa899e3

    • SHA256

      f03535ae3becd1dd0b531f945b5667579a3a28ed97c779c83c480118bb6f0abb

    • SHA512

      0c7e3e619d1a4b8bd29bafbf885a2428efabb73c072dddae86c9463b80699380b4febfa8e007f3f6f48cba3db63ac2b6064c1a6f3c4e2402ffa0fbf5c6e1b05a

    • SSDEEP

      768:54pt1NSf7M9Syk+IAnTjwm41tYhZV6pudcMiDh7FOaRb8RC1J3AFLT7Dm3UIn4U+:OVNSf7hyk+I6412V6PMqAax80XAFSrRo

    Score
    10/10
    urelastrojan

    • Urelas

      Urelas is a trojan targeting card games.

      trojanurelas

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks