General

  • Target

    53b499634bfb159fb960f58958ffd4b8338c83a26c9f1b7ddc204aefc9ef3c36.exe

  • Size

    448KB

  • Sample

    241116-l65lvavbkd

  • MD5

    237bf8b80379fecacc1952cf482542a9

  • SHA1

    07c0b8b89b202ada728a9f8a2ee0b967bbe42ece

  • SHA256

    53b499634bfb159fb960f58958ffd4b8338c83a26c9f1b7ddc204aefc9ef3c36

  • SHA512

    ba08ecc6e6acb0dd8d552e7f8a376263aab28a364912edf921c2f25d7e125959616e3052773b4438b5fb94ae91074e1ec3a278f6edc5440be2ac1769220430b2

  • SSDEEP

    6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFb:CMpASIcWYx2U6hAJQn6

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      53b499634bfb159fb960f58958ffd4b8338c83a26c9f1b7ddc204aefc9ef3c36.exe

    • Size

      448KB

    • MD5

      237bf8b80379fecacc1952cf482542a9

    • SHA1

      07c0b8b89b202ada728a9f8a2ee0b967bbe42ece

    • SHA256

      53b499634bfb159fb960f58958ffd4b8338c83a26c9f1b7ddc204aefc9ef3c36

    • SHA512

      ba08ecc6e6acb0dd8d552e7f8a376263aab28a364912edf921c2f25d7e125959616e3052773b4438b5fb94ae91074e1ec3a278f6edc5440be2ac1769220430b2

    • SSDEEP

      6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFb:CMpASIcWYx2U6hAJQn6

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks