General

  • Target

    0c1386734a551f78ffc94ae1eef61ab942072615d39c6ed381e89dcec121b846.exe

  • Size

    432KB

  • Sample

    240726-qwxwgavbla

  • MD5

    be542e225b5a041f7d228b4b6c4936e8

  • SHA1

    8bf87c7d0767461084254004be228d4297bbeafb

  • SHA256

    0c1386734a551f78ffc94ae1eef61ab942072615d39c6ed381e89dcec121b846

  • SHA512

    f9b612dc7fd67aeaedea9c500c2e05a5269642a8139c4aed5cc49db31f8cb3ee09ce99df2ff43a260747a1d031d45899a10be77db9bcd7f6c9ed5e5a903e82fa

  • SSDEEP

    6144:L8efQ6QPJGcLbjg0CutsGH+revgLIAP1fXo1EZH:C6QPJGcE0SGereYdPc

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.226

218.54.30.235

218.54.31.165

Targets

    • Target

      0c1386734a551f78ffc94ae1eef61ab942072615d39c6ed381e89dcec121b846.exe

    • Size

      432KB

    • MD5

      be542e225b5a041f7d228b4b6c4936e8

    • SHA1

      8bf87c7d0767461084254004be228d4297bbeafb

    • SHA256

      0c1386734a551f78ffc94ae1eef61ab942072615d39c6ed381e89dcec121b846

    • SHA512

      f9b612dc7fd67aeaedea9c500c2e05a5269642a8139c4aed5cc49db31f8cb3ee09ce99df2ff43a260747a1d031d45899a10be77db9bcd7f6c9ed5e5a903e82fa

    • SSDEEP

      6144:L8efQ6QPJGcLbjg0CutsGH+revgLIAP1fXo1EZH:C6QPJGcE0SGereYdPc

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks