General

  • Target

    2548bd07094d7332d8453d7ec85e27d37f6cdd35756c460a3471899ce759e098.exe

  • Size

    71KB

  • Sample

    241117-nlvx1syhjr

  • MD5

    5cc35f43952082ee1ba69f43df780768

  • SHA1

    fa6b3e264bada2a2a43257d6618282358e8b59a8

  • SHA256

    2548bd07094d7332d8453d7ec85e27d37f6cdd35756c460a3471899ce759e098

  • SHA512

    91301178d59864d0bffac4ec8352bc127504744c1a7da55ac42cab11e06d362572703ca991e2480fa1348843ea9df68700e2bb30a78c96ff49aaf787298465d3

  • SSDEEP

    1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCarawE:yLAYUzmdD0sMQl7d7IuhCae7

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      2548bd07094d7332d8453d7ec85e27d37f6cdd35756c460a3471899ce759e098.exe

    • Size

      71KB

    • MD5

      5cc35f43952082ee1ba69f43df780768

    • SHA1

      fa6b3e264bada2a2a43257d6618282358e8b59a8

    • SHA256

      2548bd07094d7332d8453d7ec85e27d37f6cdd35756c460a3471899ce759e098

    • SHA512

      91301178d59864d0bffac4ec8352bc127504744c1a7da55ac42cab11e06d362572703ca991e2480fa1348843ea9df68700e2bb30a78c96ff49aaf787298465d3

    • SSDEEP

      1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCarawE:yLAYUzmdD0sMQl7d7IuhCae7

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks