General

  • Target

    615441dbd919e62416c21413f070c62d99581e09d5f82bf233c616df2642009cN.exe

  • Size

    71KB

  • Sample

    241117-a7f44axepg

  • MD5

    57be52759311868699102199c2b94800

  • SHA1

    b71e730b4f07da4cf41a3f44cb9617e69b114cca

  • SHA256

    615441dbd919e62416c21413f070c62d99581e09d5f82bf233c616df2642009c

  • SHA512

    3a2560e47c0e37ddc3fde64f9873411dc956d0a49544603ef316b3cff5eb47702f819e405baf3011aa404fb808e8e5434a266aa44738bf05a6c9fb6010c0b44e

  • SSDEEP

    1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCaraw:yLAYUzmdD0sMQl7d7IuhCae

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      615441dbd919e62416c21413f070c62d99581e09d5f82bf233c616df2642009cN.exe

    • Size

      71KB

    • MD5

      57be52759311868699102199c2b94800

    • SHA1

      b71e730b4f07da4cf41a3f44cb9617e69b114cca

    • SHA256

      615441dbd919e62416c21413f070c62d99581e09d5f82bf233c616df2642009c

    • SHA512

      3a2560e47c0e37ddc3fde64f9873411dc956d0a49544603ef316b3cff5eb47702f819e405baf3011aa404fb808e8e5434a266aa44738bf05a6c9fb6010c0b44e

    • SSDEEP

      1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCaraw:yLAYUzmdD0sMQl7d7IuhCae

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks