General

  • Target

    14bebfcd647f3831c591d4add073f0ab1215ecc6ec0f10ae06a94c9927d4f39dN.exe

  • Size

    57KB

  • Sample

    241117-221p4a1cjk

  • MD5

    f797c33407e76637c8860c8b219ce200

  • SHA1

    97017fd99b883e4de0d3a06cbd3c55cc927534a2

  • SHA256

    14bebfcd647f3831c591d4add073f0ab1215ecc6ec0f10ae06a94c9927d4f39d

  • SHA512

    029d34cbe73aed1578056497b620a29a8986f78b1561a8f2f9d235f58c4165dd9013b7af188118731a55b3927d783c1ef4f4305d945a068a55ef32fbda4db092

  • SSDEEP

    1536:amZ+4hcuX5uZ79jmvFQTXnz9yQ/PFBhl1Af:amZ+luXwy2f9LDhDAf

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      14bebfcd647f3831c591d4add073f0ab1215ecc6ec0f10ae06a94c9927d4f39dN.exe

    • Size

      57KB

    • MD5

      f797c33407e76637c8860c8b219ce200

    • SHA1

      97017fd99b883e4de0d3a06cbd3c55cc927534a2

    • SHA256

      14bebfcd647f3831c591d4add073f0ab1215ecc6ec0f10ae06a94c9927d4f39d

    • SHA512

      029d34cbe73aed1578056497b620a29a8986f78b1561a8f2f9d235f58c4165dd9013b7af188118731a55b3927d783c1ef4f4305d945a068a55ef32fbda4db092

    • SSDEEP

      1536:amZ+4hcuX5uZ79jmvFQTXnz9yQ/PFBhl1Af:amZ+luXwy2f9LDhDAf

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks