General

  • Target

    2cb3923b42874722c2a3275f0153e973dee3c15b72f51945482a49c1bc9d851eN.exe

  • Size

    334KB

  • Sample

    241116-w9r52a1jb1

  • MD5

    56ab5b6ddbcd5b119c7ad028db7df480

  • SHA1

    ee8b233b1f7a6cc3cb4b8d06dad01f8ff1a90822

  • SHA256

    2cb3923b42874722c2a3275f0153e973dee3c15b72f51945482a49c1bc9d851e

  • SHA512

    d63d76b5cfe18645213025cff3515827712403808779880758b539fc981450786aa3a3392009e9b8b641a8fa8ba70a03f70f0714f68b4960ba158f0afa326f25

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYw6:vHW138/iXWlK885rKlGSekcj66ciV6

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      2cb3923b42874722c2a3275f0153e973dee3c15b72f51945482a49c1bc9d851eN.exe

    • Size

      334KB

    • MD5

      56ab5b6ddbcd5b119c7ad028db7df480

    • SHA1

      ee8b233b1f7a6cc3cb4b8d06dad01f8ff1a90822

    • SHA256

      2cb3923b42874722c2a3275f0153e973dee3c15b72f51945482a49c1bc9d851e

    • SHA512

      d63d76b5cfe18645213025cff3515827712403808779880758b539fc981450786aa3a3392009e9b8b641a8fa8ba70a03f70f0714f68b4960ba158f0afa326f25

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYw6:vHW138/iXWlK885rKlGSekcj66ciV6

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks