General

  • Target

    0cafeb3d70a93f5f6ca0b19aa146bae9b3696ed5d3e89600c57beffb6aebcaec.exe

  • Size

    55KB

  • Sample

    241112-b49snssapq

  • MD5

    8a03214e0ffbe0906d7a2696dc168c84

  • SHA1

    1b4df1901dd050b86e025962feb42b664c11cebd

  • SHA256

    0cafeb3d70a93f5f6ca0b19aa146bae9b3696ed5d3e89600c57beffb6aebcaec

  • SHA512

    67cf14cc96f786b8f73e41e6dd025603fd4af7c6dd4ba0081cfdebc75faeaf35017baef207f0db678a478cc8d7fc43a250cafd9842dc64aa53d56f51603b6836

  • SSDEEP

    768:egjKOwfkQsxi4CUWsFZzdXCHuWFpuQlBVQayBAFp1pAK4gpuK1cnPdFmfbpA9ANF:bKOjssTdFMsAX1pA6G0qm1Y8jgFzK

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      0cafeb3d70a93f5f6ca0b19aa146bae9b3696ed5d3e89600c57beffb6aebcaec.exe

    • Size

      55KB

    • MD5

      8a03214e0ffbe0906d7a2696dc168c84

    • SHA1

      1b4df1901dd050b86e025962feb42b664c11cebd

    • SHA256

      0cafeb3d70a93f5f6ca0b19aa146bae9b3696ed5d3e89600c57beffb6aebcaec

    • SHA512

      67cf14cc96f786b8f73e41e6dd025603fd4af7c6dd4ba0081cfdebc75faeaf35017baef207f0db678a478cc8d7fc43a250cafd9842dc64aa53d56f51603b6836

    • SSDEEP

      768:egjKOwfkQsxi4CUWsFZzdXCHuWFpuQlBVQayBAFp1pAK4gpuK1cnPdFmfbpA9ANF:bKOjssTdFMsAX1pA6G0qm1Y8jgFzK

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks