General

  • Target

    e380a58051d960ccbfee0df80aba87f15f0c00ab8b182d1bbe2aa4e0f61ce8df.exe

  • Size

    51KB

  • Sample

    241118-2hz98axdrq

  • MD5

    9f4aaf15d5b93dd6fc5827f8609e5490

  • SHA1

    dc7a99bcdac0547e89f806cbb8d20e38912dbf8e

  • SHA256

    e380a58051d960ccbfee0df80aba87f15f0c00ab8b182d1bbe2aa4e0f61ce8df

  • SHA512

    69b08cecda3eb43db53b2fa1bac4d463f67db0119a09d540f59c8fc544e70f56db3b0d76ef90513302c885ce53632fca8ed26f4eb123ee71e239e82a4350f31b

  • SSDEEP

    1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhPs:KsdXfBo/DBJBGzkP5Ps

Score
10/10

Malware Config

Extracted

Family

urelas

C2

121.88.5.183

218.54.28.139

Targets

    • Target

      e380a58051d960ccbfee0df80aba87f15f0c00ab8b182d1bbe2aa4e0f61ce8df.exe

    • Size

      51KB

    • MD5

      9f4aaf15d5b93dd6fc5827f8609e5490

    • SHA1

      dc7a99bcdac0547e89f806cbb8d20e38912dbf8e

    • SHA256

      e380a58051d960ccbfee0df80aba87f15f0c00ab8b182d1bbe2aa4e0f61ce8df

    • SHA512

      69b08cecda3eb43db53b2fa1bac4d463f67db0119a09d540f59c8fc544e70f56db3b0d76ef90513302c885ce53632fca8ed26f4eb123ee71e239e82a4350f31b

    • SSDEEP

      1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhPs:KsdXfBo/DBJBGzkP5Ps

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks