General

  • Target

    0ef8efdca638efb29520351632672cc0N.exe

  • Size

    61KB

  • Sample

    240723-1eskjazdnk

  • MD5

    0ef8efdca638efb29520351632672cc0

  • SHA1

    70b61011e0bc5f8d795403c905762bc075d50fef

  • SHA256

    f8ff4e4a99acd9aa1aca963b8c60c56a73d8c5a4be64d88ddb69f0d3b8b835f1

  • SHA512

    4111944241c67bf28018b78a41bdf47125126635660f527df8c2333e8a3654c3acfb9c64bd2851b926368ca6ee6b31bf6be469dc6c610264676b9eb82d75ec45

  • SSDEEP

    1536:saTkcl2v/z0thjkh6+uYLo31d0JuPrROVg:Jo0cAthu6+FQ0JuPkg

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      0ef8efdca638efb29520351632672cc0N.exe

    • Size

      61KB

    • MD5

      0ef8efdca638efb29520351632672cc0

    • SHA1

      70b61011e0bc5f8d795403c905762bc075d50fef

    • SHA256

      f8ff4e4a99acd9aa1aca963b8c60c56a73d8c5a4be64d88ddb69f0d3b8b835f1

    • SHA512

      4111944241c67bf28018b78a41bdf47125126635660f527df8c2333e8a3654c3acfb9c64bd2851b926368ca6ee6b31bf6be469dc6c610264676b9eb82d75ec45

    • SSDEEP

      1536:saTkcl2v/z0thjkh6+uYLo31d0JuPrROVg:Jo0cAthu6+FQ0JuPkg

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks