Overview

overview

10

Static

static

10

2cfb432a0f...10.exe

windows7-x64

10

2cfb432a0f...10.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2cfb432a0fdc6e4149c1fabdf7fad5d76c55ea6d84fd1437054ffb26dfb9a710.exe

  • Size

    351KB

  • Sample

    240705-cwgmlazgkr

  • MD5

    8263d01133f12af40350e77cf6a461a0

  • SHA1

    b368cf7f69a8de0fe4aad4e8818b44182fe19eef

  • SHA256

    2cfb432a0fdc6e4149c1fabdf7fad5d76c55ea6d84fd1437054ffb26dfb9a710

  • SHA512

    b1552674b01cc7332f576ec267526dce178dee51eea13a7ddcc58dc90d95c45fc51e1c3b41713499d5522d4bbedc1e29662f8a8efb6e976adcebba7199295a7a

  • SSDEEP

    3072:NdXi+V5Kgxpdxj8gbib20xTyst542t8ZHWBow8+zoB91wDKCZnaNBfPIXnnyrTEh:Nd7rpL43btmQ58Z27zw3eZnaznIXn0TY

Score
10/10
urelastrojan

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      2cfb432a0fdc6e4149c1fabdf7fad5d76c55ea6d84fd1437054ffb26dfb9a710.exe

    • Size

      351KB

    • MD5

      8263d01133f12af40350e77cf6a461a0

    • SHA1

      b368cf7f69a8de0fe4aad4e8818b44182fe19eef

    • SHA256

      2cfb432a0fdc6e4149c1fabdf7fad5d76c55ea6d84fd1437054ffb26dfb9a710

    • SHA512

      b1552674b01cc7332f576ec267526dce178dee51eea13a7ddcc58dc90d95c45fc51e1c3b41713499d5522d4bbedc1e29662f8a8efb6e976adcebba7199295a7a

    • SSDEEP

      3072:NdXi+V5Kgxpdxj8gbib20xTyst542t8ZHWBow8+zoB91wDKCZnaNBfPIXnnyrTEh:Nd7rpL43btmQ58Z27zw3eZnaznIXn0TY

    Score
    10/10
    urelastrojan

    • Urelas

      Urelas is a trojan targeting card games.

      trojanurelas

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks