General

  • Target

    62047ff726957cde33910db4cdabccc0N.exe

  • Size

    63KB

  • Sample

    240728-g6556awdjg

  • MD5

    62047ff726957cde33910db4cdabccc0

  • SHA1

    c3a79aa47a19c6c0a9a023a72cbec50b03f8e1f5

  • SHA256

    2a61b9a53eab4f3367910d640a56f91efed198375bd01e2a66f0c3dc303f268d

  • SHA512

    6b07ce1a9c1a7f8afea4f0d6c4bc102abfd68d83621f12f97c2994b2c35cf05f0ba7efe9df2237aac8f05901b69cb060cb20d0d5da6c50c7eb0e08bcb317b139

  • SSDEEP

    1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTmx:6bQRSHpAvzyf7MzeTO

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      62047ff726957cde33910db4cdabccc0N.exe

    • Size

      63KB

    • MD5

      62047ff726957cde33910db4cdabccc0

    • SHA1

      c3a79aa47a19c6c0a9a023a72cbec50b03f8e1f5

    • SHA256

      2a61b9a53eab4f3367910d640a56f91efed198375bd01e2a66f0c3dc303f268d

    • SHA512

      6b07ce1a9c1a7f8afea4f0d6c4bc102abfd68d83621f12f97c2994b2c35cf05f0ba7efe9df2237aac8f05901b69cb060cb20d0d5da6c50c7eb0e08bcb317b139

    • SSDEEP

      1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTmx:6bQRSHpAvzyf7MzeTO

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks