General

  • Target

    543d1bd632ab7ebd394dfb729608bdde88c914135aa0da53233533dbff6feb1bN.exe

  • Size

    57KB

  • Sample

    241111-ztcl7azkbm

  • MD5

    e804a355da0e738a398c34fb2f7ed573

  • SHA1

    2c8ce454059daf53ddeddf1163ee67816cd4b493

  • SHA256

    d60d15a8b29cfb6032b1d1eb850d363760afba3e32264bbe565a9f98e88ea591

  • SHA512

    21360f5286dfc8360ea8ed723e78b074923466a86078b67684843c00a0129edc661db2d6616b881990ff4d03e1d3d800414d977a8fe993c3e42155e2dd2a94e4

  • SSDEEP

    1536:amZ+4hcuX5uZ79jmvFQTXnz9yQ/PFBhl1n:amZ+luXwy2f9LDhDn

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      543d1bd632ab7ebd394dfb729608bdde88c914135aa0da53233533dbff6feb1bN.exe

    • Size

      57KB

    • MD5

      e804a355da0e738a398c34fb2f7ed573

    • SHA1

      2c8ce454059daf53ddeddf1163ee67816cd4b493

    • SHA256

      d60d15a8b29cfb6032b1d1eb850d363760afba3e32264bbe565a9f98e88ea591

    • SHA512

      21360f5286dfc8360ea8ed723e78b074923466a86078b67684843c00a0129edc661db2d6616b881990ff4d03e1d3d800414d977a8fe993c3e42155e2dd2a94e4

    • SSDEEP

      1536:amZ+4hcuX5uZ79jmvFQTXnz9yQ/PFBhl1n:amZ+luXwy2f9LDhDn

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks