General

  • Target

    434927414b3d9bb823b1fbd9e6004850N.exe

  • Size

    331KB

  • Sample

    240801-f9vm6ayepa

  • MD5

    434927414b3d9bb823b1fbd9e6004850

  • SHA1

    65d17adea257f844a0bd72cf36ac5db66c236163

  • SHA256

    ed6ea4d610a46302552d12c74f259d7d5eddfff04f6263241ffdac17d9cf6e91

  • SHA512

    eb9a6ae7859380769f5dd30a29b78497b1c747486fd0d3fece8a039907754b0ef1adfb8f81f5ec8565d73429c435fa5726ab4c7d23da321875a5bcb5d20045f6

  • SSDEEP

    6144:yty5fbpxDuMcHYwt1gxloqtaE5iWbUMqfn8EijRUNafrHBw/iT:ytCLD7+51gxeq3gOU9EEQrhMM

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      434927414b3d9bb823b1fbd9e6004850N.exe

    • Size

      331KB

    • MD5

      434927414b3d9bb823b1fbd9e6004850

    • SHA1

      65d17adea257f844a0bd72cf36ac5db66c236163

    • SHA256

      ed6ea4d610a46302552d12c74f259d7d5eddfff04f6263241ffdac17d9cf6e91

    • SHA512

      eb9a6ae7859380769f5dd30a29b78497b1c747486fd0d3fece8a039907754b0ef1adfb8f81f5ec8565d73429c435fa5726ab4c7d23da321875a5bcb5d20045f6

    • SSDEEP

      6144:yty5fbpxDuMcHYwt1gxloqtaE5iWbUMqfn8EijRUNafrHBw/iT:ytCLD7+51gxeq3gOU9EEQrhMM

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks