General

  • Target

    a2a6e08967146e01690ba2c66c2004e0N.exe

  • Size

    70KB

  • Sample

    240817-1ggwta1djp

  • MD5

    a2a6e08967146e01690ba2c66c2004e0

  • SHA1

    225865c001791e456d939c41597be5ee84bf9d2a

  • SHA256

    55b922a0eec15aef2c82d46686ad300ccac2452c891011c791c7c795a113ba2e

  • SHA512

    2f4191724a903f578d3aa489ac761369715f3f973e64e893d647da470dcecbbf43c41e86146cc2d1a75fbbbfd2cdcc9620b4c23ff31330a931c458846065d888

  • SSDEEP

    1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCarawk:yLAYUzmdD0sMQl7d7IuhCaeN

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      a2a6e08967146e01690ba2c66c2004e0N.exe

    • Size

      70KB

    • MD5

      a2a6e08967146e01690ba2c66c2004e0

    • SHA1

      225865c001791e456d939c41597be5ee84bf9d2a

    • SHA256

      55b922a0eec15aef2c82d46686ad300ccac2452c891011c791c7c795a113ba2e

    • SHA512

      2f4191724a903f578d3aa489ac761369715f3f973e64e893d647da470dcecbbf43c41e86146cc2d1a75fbbbfd2cdcc9620b4c23ff31330a931c458846065d888

    • SSDEEP

      1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCarawk:yLAYUzmdD0sMQl7d7IuhCaeN

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks