General

  • Target

    58ca44b2acdc23929378274d1af51dd0N.exe

  • Size

    56KB

  • Sample

    240725-cx6ccawdpb

  • MD5

    58ca44b2acdc23929378274d1af51dd0

  • SHA1

    6fd2145e2ed15478712ef92762552aa73a128cb6

  • SHA256

    e1956debfcb108a849bd79dd248753279ae9cb1e3de1925ea5b00fde3ce0b903

  • SHA512

    df9c4f34ac7171cce4d0d96c5e463eb5e02a03374e16e5d3f3e694586364ffaa53ac914e35ae160d6995219d520ec04d84cc80405fd2dec58d656cadc1b6a5f3

  • SSDEEP

    1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8H:MOemdTd1o74qlmbbJ+x+IkJ

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      58ca44b2acdc23929378274d1af51dd0N.exe

    • Size

      56KB

    • MD5

      58ca44b2acdc23929378274d1af51dd0

    • SHA1

      6fd2145e2ed15478712ef92762552aa73a128cb6

    • SHA256

      e1956debfcb108a849bd79dd248753279ae9cb1e3de1925ea5b00fde3ce0b903

    • SHA512

      df9c4f34ac7171cce4d0d96c5e463eb5e02a03374e16e5d3f3e694586364ffaa53ac914e35ae160d6995219d520ec04d84cc80405fd2dec58d656cadc1b6a5f3

    • SSDEEP

      1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8H:MOemdTd1o74qlmbbJ+x+IkJ

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks