General

  • Target

    acf28e718581966b6f116d765656eb30N.exe

  • Size

    56KB

  • Sample

    240727-j33lzawdqm

  • MD5

    acf28e718581966b6f116d765656eb30

  • SHA1

    ff3aadbe4a294cafb424e7a06df54dab563d2639

  • SHA256

    ab523b44bb896976cbd004767f37aaf5475fdb212156c61276dce81c8b9a77d4

  • SHA512

    2b034f9f2a218fdcb4bd2e88bc5a2f21dac4793bab2076cef730e41a1c4be934f4f4676032f3107e86d914483757be73a258244a7ce67f931feb623186d9ad74

  • SSDEEP

    1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8Ha:MOemdTd1o74qlmbbJ+x+IkJa

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      acf28e718581966b6f116d765656eb30N.exe

    • Size

      56KB

    • MD5

      acf28e718581966b6f116d765656eb30

    • SHA1

      ff3aadbe4a294cafb424e7a06df54dab563d2639

    • SHA256

      ab523b44bb896976cbd004767f37aaf5475fdb212156c61276dce81c8b9a77d4

    • SHA512

      2b034f9f2a218fdcb4bd2e88bc5a2f21dac4793bab2076cef730e41a1c4be934f4f4676032f3107e86d914483757be73a258244a7ce67f931feb623186d9ad74

    • SSDEEP

      1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8Ha:MOemdTd1o74qlmbbJ+x+IkJa

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks