General

  • Target

    52fe8a677c8c2ac2b8978628929e0be6e87f430d16f4e48c75033af005f92924.exe

  • Size

    332KB

  • Sample

    241117-fn254ssarf

  • MD5

    277aade9d81f39ce3777ed79d5ab10c5

  • SHA1

    fda2240f20e5330f62fce7998aab8d6410375a10

  • SHA256

    52fe8a677c8c2ac2b8978628929e0be6e87f430d16f4e48c75033af005f92924

  • SHA512

    33053db3052de5a88c24bec07445f6152964f02b7aec97f9515717e64ea8e1f444bac71ef71a5bc00d77ca29b951f855a0b73c1e71007f4ef8e4e141dfe01694

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVVB:vHW138/iXWlK885rKlGSekcj66ciEVB

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      52fe8a677c8c2ac2b8978628929e0be6e87f430d16f4e48c75033af005f92924.exe

    • Size

      332KB

    • MD5

      277aade9d81f39ce3777ed79d5ab10c5

    • SHA1

      fda2240f20e5330f62fce7998aab8d6410375a10

    • SHA256

      52fe8a677c8c2ac2b8978628929e0be6e87f430d16f4e48c75033af005f92924

    • SHA512

      33053db3052de5a88c24bec07445f6152964f02b7aec97f9515717e64ea8e1f444bac71ef71a5bc00d77ca29b951f855a0b73c1e71007f4ef8e4e141dfe01694

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVVB:vHW138/iXWlK885rKlGSekcj66ciEVB

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks