General

  • Target

    ee7574665b0a2e9bbfe4dd4608db4d40N.exe

  • Size

    66KB

  • Sample

    240725-x11w9ayhnr

  • MD5

    ee7574665b0a2e9bbfe4dd4608db4d40

  • SHA1

    5c61d404abd6e57b4bbd0c256223f803a423b29e

  • SHA256

    bbde24c76b5d3d756be5dd003e2ae9b821d9e0b41a671471cd3f74b9fb8fe399

  • SHA512

    25e445e9534af6cdb92585795456d1688912fa14a662c6288918006fc26fe81c5c39c13b456030b1e94ad3e826f4fb6b137fa629f154d08433fb0bccb00ea8c0

  • SSDEEP

    1536:04/WgLAjdZsp+uChoLnDeoqYAJjvLFymnHsPe9:l//AjMp+u2onejH2Pe9

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      ee7574665b0a2e9bbfe4dd4608db4d40N.exe

    • Size

      66KB

    • MD5

      ee7574665b0a2e9bbfe4dd4608db4d40

    • SHA1

      5c61d404abd6e57b4bbd0c256223f803a423b29e

    • SHA256

      bbde24c76b5d3d756be5dd003e2ae9b821d9e0b41a671471cd3f74b9fb8fe399

    • SHA512

      25e445e9534af6cdb92585795456d1688912fa14a662c6288918006fc26fe81c5c39c13b456030b1e94ad3e826f4fb6b137fa629f154d08433fb0bccb00ea8c0

    • SSDEEP

      1536:04/WgLAjdZsp+uChoLnDeoqYAJjvLFymnHsPe9:l//AjMp+u2onejH2Pe9

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks