General

  • Target

    66fa0442e1c3091916a48ccb90a5cc141cc00add8a1235b6a71422dd114a988a.exe

  • Size

    55KB

  • Sample

    241112-bktmca1emb

  • MD5

    5bb4304841ab726ef0a7ac1acc240ac5

  • SHA1

    99b0cb5f3769e5c88b1f816c75e831669d8ca719

  • SHA256

    66fa0442e1c3091916a48ccb90a5cc141cc00add8a1235b6a71422dd114a988a

  • SHA512

    31e2dee40e1970b729a1ec673d9db0b4e4585478e4f6b533763a6c0cad8639a310294b34b2b7273793a08879ab807e32bd46be8e07d3827ef6c31f60b84a59aa

  • SSDEEP

    1536:qw788avzI+on+TqOK0cHMqtzMLvWsrupwnTf1GqT7K:qwda7KVr0cHneunw1K

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      66fa0442e1c3091916a48ccb90a5cc141cc00add8a1235b6a71422dd114a988a.exe

    • Size

      55KB

    • MD5

      5bb4304841ab726ef0a7ac1acc240ac5

    • SHA1

      99b0cb5f3769e5c88b1f816c75e831669d8ca719

    • SHA256

      66fa0442e1c3091916a48ccb90a5cc141cc00add8a1235b6a71422dd114a988a

    • SHA512

      31e2dee40e1970b729a1ec673d9db0b4e4585478e4f6b533763a6c0cad8639a310294b34b2b7273793a08879ab807e32bd46be8e07d3827ef6c31f60b84a59aa

    • SSDEEP

      1536:qw788avzI+on+TqOK0cHMqtzMLvWsrupwnTf1GqT7K:qwda7KVr0cHneunw1K

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks