General

  • Target

    2c97d07e0a67cecf264dabe0050159919485b35c446663f7acdb52976faed596.exe

  • Size

    332KB

  • Sample

    241117-ckmz8ssqgj

  • MD5

    a375c594a60d55f023e637ef9a2449a8

  • SHA1

    c2d67e9b8116c42ab86328c04c417449a4ac72f1

  • SHA256

    2c97d07e0a67cecf264dabe0050159919485b35c446663f7acdb52976faed596

  • SHA512

    cfbacec71da430e56429b2986ed4b0d2ea44271f86c442632d9df03c27d14484bf3a821c056cbc938bb3ed7baa18e7ca3bea95ed9eb372248f717c4fb965c979

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVVs:vHW138/iXWlK885rKlGSekcj66ciEVs

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      2c97d07e0a67cecf264dabe0050159919485b35c446663f7acdb52976faed596.exe

    • Size

      332KB

    • MD5

      a375c594a60d55f023e637ef9a2449a8

    • SHA1

      c2d67e9b8116c42ab86328c04c417449a4ac72f1

    • SHA256

      2c97d07e0a67cecf264dabe0050159919485b35c446663f7acdb52976faed596

    • SHA512

      cfbacec71da430e56429b2986ed4b0d2ea44271f86c442632d9df03c27d14484bf3a821c056cbc938bb3ed7baa18e7ca3bea95ed9eb372248f717c4fb965c979

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVVs:vHW138/iXWlK885rKlGSekcj66ciEVs

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks