General

  • Target

    67980c2d0d647df48bdedc9637049e7f6da945bd574f66f22538923f99f067fbN.exe

  • Size

    448KB

  • Sample

    241115-tlajza1kbl

  • MD5

    eab7f8c8a9a42c5880fdbf3929e15a70

  • SHA1

    516886d2b2b05c7774c4aff0480a44f17152c79e

  • SHA256

    67980c2d0d647df48bdedc9637049e7f6da945bd574f66f22538923f99f067fb

  • SHA512

    efc09439cfce232e71bc5e97586355fe59ccf9d0a4c5c9a9332c95830a08dec42c3d00d818e6a5c983c1456848638f052ce0e4aca289a9fde70caf9ace59efbd

  • SSDEEP

    6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFb:CMpASIcWYx2U6hAJQn6

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      67980c2d0d647df48bdedc9637049e7f6da945bd574f66f22538923f99f067fbN.exe

    • Size

      448KB

    • MD5

      eab7f8c8a9a42c5880fdbf3929e15a70

    • SHA1

      516886d2b2b05c7774c4aff0480a44f17152c79e

    • SHA256

      67980c2d0d647df48bdedc9637049e7f6da945bd574f66f22538923f99f067fb

    • SHA512

      efc09439cfce232e71bc5e97586355fe59ccf9d0a4c5c9a9332c95830a08dec42c3d00d818e6a5c983c1456848638f052ce0e4aca289a9fde70caf9ace59efbd

    • SSDEEP

      6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFb:CMpASIcWYx2U6hAJQn6

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks