Overview

overview

10

Static

static

3

950622c2d4...a6.exe

windows7-x64

10

950622c2d4...a6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    950622c2d41ddc08383c11b97869f76305d7bfd1bcf462b0478365ec756cf4a6

  • Size

    69KB

  • Sample

    240621-bg7d2athjh

  • MD5

    bc946f6d60e45760691b1677a1be5332

  • SHA1

    4a157f0f68a46e5a53d58a63c0afaa7b340e1f6c

  • SHA256

    950622c2d41ddc08383c11b97869f76305d7bfd1bcf462b0478365ec756cf4a6

  • SHA512

    eb97dbbff65bfd7cc069d00b9f5ab564a0c8998c53f785a2bddb9072e1390d6d9a08b862c21395b279834270353d6477fae5f9740c9c5669ec174f0a35a4fb25

  • SSDEEP

    1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCarawv:yLAYUzmdD0sMQl7d7IuhCaem

Score
10/10
urelastrojan

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      950622c2d41ddc08383c11b97869f76305d7bfd1bcf462b0478365ec756cf4a6

    • Size

      69KB

    • MD5

      bc946f6d60e45760691b1677a1be5332

    • SHA1

      4a157f0f68a46e5a53d58a63c0afaa7b340e1f6c

    • SHA256

      950622c2d41ddc08383c11b97869f76305d7bfd1bcf462b0478365ec756cf4a6

    • SHA512

      eb97dbbff65bfd7cc069d00b9f5ab564a0c8998c53f785a2bddb9072e1390d6d9a08b862c21395b279834270353d6477fae5f9740c9c5669ec174f0a35a4fb25

    • SSDEEP

      1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCarawv:yLAYUzmdD0sMQl7d7IuhCaem

    Score
    10/10
    urelastrojan

    • Urelas

      Urelas is a trojan targeting card games.

      trojanurelas

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks