General

  • Target

    9cbbc3506ef59fe1ee5234870796925598864441e42c64e64f2d73a2b79c6dd4N.exe

  • Size

    454KB

  • Sample

    241112-wc68paxhjb

  • MD5

    c78e49bc32b6fcfa5772254f2a503170

  • SHA1

    d77a6a35c674d9497ef937b3aab56611f54d63eb

  • SHA256

    9cbbc3506ef59fe1ee5234870796925598864441e42c64e64f2d73a2b79c6dd4

  • SHA512

    7d2cdba0e0c7ab379c304fe1b3a088dd400d07982a1538281deb7cc7a8c25b76b257d45bdd7a53a7425a05cb0d653cdd31fc363d20cdbe8e358d0abfd3467f08

  • SSDEEP

    6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFTnm:CMpASIcWYx2U6hAJQnZ

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      9cbbc3506ef59fe1ee5234870796925598864441e42c64e64f2d73a2b79c6dd4N.exe

    • Size

      454KB

    • MD5

      c78e49bc32b6fcfa5772254f2a503170

    • SHA1

      d77a6a35c674d9497ef937b3aab56611f54d63eb

    • SHA256

      9cbbc3506ef59fe1ee5234870796925598864441e42c64e64f2d73a2b79c6dd4

    • SHA512

      7d2cdba0e0c7ab379c304fe1b3a088dd400d07982a1538281deb7cc7a8c25b76b257d45bdd7a53a7425a05cb0d653cdd31fc363d20cdbe8e358d0abfd3467f08

    • SSDEEP

      6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFTnm:CMpASIcWYx2U6hAJQnZ

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks