General

  • Target

    2aac6d86bd697e53e9a31eb139523650N.exe

  • Size

    79KB

  • Sample

    240719-ajvycatelm

  • MD5

    2aac6d86bd697e53e9a31eb139523650

  • SHA1

    5e1047570e77d41dacaef83010d6a0df28c07eba

  • SHA256

    e8c2cde4d1c2dc2c6ce653f50008e4e47844a142c2576b199419b79cb0fbb692

  • SHA512

    7e0a0229b7f1ac544a3f7b78884de7fa0c3845bb1324748e7d6b3044feb9ac5ebab56c467468c0520256ae5a779f85602bc51eddf087a40096a41cc0b74f8190

  • SSDEEP

    1536:9HxkDvWdB7O9dKymMyCMGni2Lz1LaRQLDEg:9RkjWjK9ABpGzlaRQLd

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.77

218.54.47.74

Targets

    • Target

      2aac6d86bd697e53e9a31eb139523650N.exe

    • Size

      79KB

    • MD5

      2aac6d86bd697e53e9a31eb139523650

    • SHA1

      5e1047570e77d41dacaef83010d6a0df28c07eba

    • SHA256

      e8c2cde4d1c2dc2c6ce653f50008e4e47844a142c2576b199419b79cb0fbb692

    • SHA512

      7e0a0229b7f1ac544a3f7b78884de7fa0c3845bb1324748e7d6b3044feb9ac5ebab56c467468c0520256ae5a779f85602bc51eddf087a40096a41cc0b74f8190

    • SSDEEP

      1536:9HxkDvWdB7O9dKymMyCMGni2Lz1LaRQLDEg:9RkjWjK9ABpGzlaRQLd

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks