General

  • Target

    ba1dabe671659607512ffbdc3a511ab291f71989e44fd9154ad406cd433ada6eN.exe

  • Size

    55KB

  • Sample

    241111-lgqfmawpft

  • MD5

    34a0e54d7f14497ea80ed04f5046aabd

  • SHA1

    8af6a963ea3e8ceb1c13118d7c6f70d5a5dbce35

  • SHA256

    2552d789175213abe575a36707731c21cdfca34b5bd19b4f469ec7ce89069e90

  • SHA512

    a09190143f1ee426f8324f225b265be4c3b48d0abed2079e7c35f77d288afbcbcca1fa3dbdb6a705c3305472e90f2372f6e96196aa94e2910545d0988c0645b2

  • SSDEEP

    1536:qw788avzI+on+TqOK0cHMqtzMLvWsrupwnTf1GqT7l:qwda7KVr0cHneunw1l

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      ba1dabe671659607512ffbdc3a511ab291f71989e44fd9154ad406cd433ada6eN.exe

    • Size

      55KB

    • MD5

      34a0e54d7f14497ea80ed04f5046aabd

    • SHA1

      8af6a963ea3e8ceb1c13118d7c6f70d5a5dbce35

    • SHA256

      2552d789175213abe575a36707731c21cdfca34b5bd19b4f469ec7ce89069e90

    • SHA512

      a09190143f1ee426f8324f225b265be4c3b48d0abed2079e7c35f77d288afbcbcca1fa3dbdb6a705c3305472e90f2372f6e96196aa94e2910545d0988c0645b2

    • SSDEEP

      1536:qw788avzI+on+TqOK0cHMqtzMLvWsrupwnTf1GqT7l:qwda7KVr0cHneunw1l

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks