General

  • Target

    75aceb1ee48238c11bb8bd60c884a2c0N.exe

  • Size

    4.4MB

  • Sample

    240806-hy8rrawhnb

  • MD5

    75aceb1ee48238c11bb8bd60c884a2c0

  • SHA1

    b417a2143b3fd5a40148b40e8148a7e73be314a2

  • SHA256

    0806050f56dfa091871908038662b48b0d2aa6926d14acd97a2d91afccd6de3f

  • SHA512

    d3ed84297adc67ed59db9c08545c3fc470b42b278866e6137a05631730cb0e5f39a1394fcaf6afa6718403ded1eb55ff56756a44f132723c6e04f56775660ed4

  • SSDEEP

    24576:cUowYcOW4NcW9tGw2Eu8CkdhpIIZxYETKtZK/nyr5DBp1:GcOukjS8JdIaxpTK0nyNn1

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

Targets

    • Target

      75aceb1ee48238c11bb8bd60c884a2c0N.exe

    • Size

      4.4MB

    • MD5

      75aceb1ee48238c11bb8bd60c884a2c0

    • SHA1

      b417a2143b3fd5a40148b40e8148a7e73be314a2

    • SHA256

      0806050f56dfa091871908038662b48b0d2aa6926d14acd97a2d91afccd6de3f

    • SHA512

      d3ed84297adc67ed59db9c08545c3fc470b42b278866e6137a05631730cb0e5f39a1394fcaf6afa6718403ded1eb55ff56756a44f132723c6e04f56775660ed4

    • SSDEEP

      24576:cUowYcOW4NcW9tGw2Eu8CkdhpIIZxYETKtZK/nyr5DBp1:GcOukjS8JdIaxpTK0nyNn1

    • Urelas

      Urelas is a trojan targeting card games.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks