General

  • Target

    243fad4d81fb2987a60532138e72cc90N.exe

  • Size

    60KB

  • Sample

    240909-tc4rfswgnq

  • MD5

    243fad4d81fb2987a60532138e72cc90

  • SHA1

    644ee66010cf0c0fa91b02b0bad2d9334b1c2f3e

  • SHA256

    2ea69fa17b0b716e5727ad491ca63ca92a293ee8489757244adea0814e0e4698

  • SHA512

    3ad74fb8715dab100d7d16126ba3409a2c156e096f13fd9a099d324d87f0be403e1cf020aca81a9d5a3824ccef8020f0ae8426f461edf7d31ca4771f6815489c

  • SSDEEP

    768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPb:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdI

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      243fad4d81fb2987a60532138e72cc90N.exe

    • Size

      60KB

    • MD5

      243fad4d81fb2987a60532138e72cc90

    • SHA1

      644ee66010cf0c0fa91b02b0bad2d9334b1c2f3e

    • SHA256

      2ea69fa17b0b716e5727ad491ca63ca92a293ee8489757244adea0814e0e4698

    • SHA512

      3ad74fb8715dab100d7d16126ba3409a2c156e096f13fd9a099d324d87f0be403e1cf020aca81a9d5a3824ccef8020f0ae8426f461edf7d31ca4771f6815489c

    • SSDEEP

      768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPb:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdI

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks