General

  • Target

    6a43a87733f9b0cbede5e6ebacedd6d4284b89fbf694c2729f8c2d72e22ec085N.exe

  • Size

    55KB

  • Sample

    241112-ag51jayqcs

  • MD5

    dbedf526a0102608990dc45a085e9189

  • SHA1

    f2a25eff01d8390dbc06663dd91d030f56cc5b49

  • SHA256

    9c45c7887f9588ddbf73c36ab5ea79c5d585fcddabaf2edd2353eba9accf5858

  • SHA512

    4af37aae547ac01f4d84673cad3a135db1f0e9b6aa2b5c02cb2ed270472383f143a6f2dd72d1f52598f92400ea13bf6a8ceea721c963604c5ebb79c3c97e8a7a

  • SSDEEP

    768:egjKOwfkQsxi4CUWsFZzdXCHuWFpuQlBVQayBAFp1pAK4gpuK1cnPdFmfbpA9ANw:bKOjssTdFMsAX1pA6G0qm1Y8jgFzT

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      6a43a87733f9b0cbede5e6ebacedd6d4284b89fbf694c2729f8c2d72e22ec085N.exe

    • Size

      55KB

    • MD5

      dbedf526a0102608990dc45a085e9189

    • SHA1

      f2a25eff01d8390dbc06663dd91d030f56cc5b49

    • SHA256

      9c45c7887f9588ddbf73c36ab5ea79c5d585fcddabaf2edd2353eba9accf5858

    • SHA512

      4af37aae547ac01f4d84673cad3a135db1f0e9b6aa2b5c02cb2ed270472383f143a6f2dd72d1f52598f92400ea13bf6a8ceea721c963604c5ebb79c3c97e8a7a

    • SSDEEP

      768:egjKOwfkQsxi4CUWsFZzdXCHuWFpuQlBVQayBAFp1pAK4gpuK1cnPdFmfbpA9ANw:bKOjssTdFMsAX1pA6G0qm1Y8jgFzT

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks