General

  • Target

    59c49c0b0b8c653cc95a856a558ae0a0N.exe

  • Size

    53KB

  • Sample

    240802-fm6f5ssbje

  • MD5

    59c49c0b0b8c653cc95a856a558ae0a0

  • SHA1

    795e4ce91db3be9db49e562a7b62a11a711e208c

  • SHA256

    f2ca2511b414dfdddd8aaf75a968acb77edcdcde4ec9cbbcd026de737ef173bd

  • SHA512

    605194f36f6112f371df738e26dd512364ace472e8b5be4dc55a8a9adbefdcd963d7e60d6fce8769358704a5908145ac24938c6571f1930bd0e184229c75c91e

  • SSDEEP

    1536:TlnBzGPEdPJpUI4QP4BDK3XmbPfKJ97ifw:JnBGPUMQwBDamb3a7iY

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      59c49c0b0b8c653cc95a856a558ae0a0N.exe

    • Size

      53KB

    • MD5

      59c49c0b0b8c653cc95a856a558ae0a0

    • SHA1

      795e4ce91db3be9db49e562a7b62a11a711e208c

    • SHA256

      f2ca2511b414dfdddd8aaf75a968acb77edcdcde4ec9cbbcd026de737ef173bd

    • SHA512

      605194f36f6112f371df738e26dd512364ace472e8b5be4dc55a8a9adbefdcd963d7e60d6fce8769358704a5908145ac24938c6571f1930bd0e184229c75c91e

    • SSDEEP

      1536:TlnBzGPEdPJpUI4QP4BDK3XmbPfKJ97ifw:JnBGPUMQwBDamb3a7iY

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks