General

  • Target

    90c67258d00416ba13ce937c4f4e055688ef225102b8b75c668126646873873a.exe

  • Size

    332KB

  • Sample

    241118-2dj3faxdjq

  • MD5

    65b4a3aa23c22537f52adee2b0bf5169

  • SHA1

    8434a372b729cde9ee1d032db3306cf813cccb1b

  • SHA256

    90c67258d00416ba13ce937c4f4e055688ef225102b8b75c668126646873873a

  • SHA512

    8e444fa52bf1dfb7c45499b76dd998c529525f3ebcd970161bbb4e0b3883e1d062d15faec83e30043b27d5f94b3663fc5e63ea5142743739e2df075858af612c

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY6:vHW138/iXWlK885rKlGSekcj66ci7

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      90c67258d00416ba13ce937c4f4e055688ef225102b8b75c668126646873873a.exe

    • Size

      332KB

    • MD5

      65b4a3aa23c22537f52adee2b0bf5169

    • SHA1

      8434a372b729cde9ee1d032db3306cf813cccb1b

    • SHA256

      90c67258d00416ba13ce937c4f4e055688ef225102b8b75c668126646873873a

    • SHA512

      8e444fa52bf1dfb7c45499b76dd998c529525f3ebcd970161bbb4e0b3883e1d062d15faec83e30043b27d5f94b3663fc5e63ea5142743739e2df075858af612c

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY6:vHW138/iXWlK885rKlGSekcj66ci7

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks