General

  • Target

    be4e7d36a957f6effb39ee6e4c8fd1723de7cb3718685ad57755825466e204bb.exe

  • Size

    333KB

  • Sample

    241118-c2ncbswje1

  • MD5

    23c77673328452fe83e7f4c9ffe44b48

  • SHA1

    450b06237336098386446a853cd2d97477318acc

  • SHA256

    be4e7d36a957f6effb39ee6e4c8fd1723de7cb3718685ad57755825466e204bb

  • SHA512

    006f02d5ab0415f58223d9d4de20f11ad871df47ba5a552b5b9d8ce888f46bc0dcb39bb14a867f82cbb69f7e79819b27ea3f59fa3bf324284ec2a09c6ef8d8f9

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVp:vHW138/iXWlK885rKlGSekcj66ciEp

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      be4e7d36a957f6effb39ee6e4c8fd1723de7cb3718685ad57755825466e204bb.exe

    • Size

      333KB

    • MD5

      23c77673328452fe83e7f4c9ffe44b48

    • SHA1

      450b06237336098386446a853cd2d97477318acc

    • SHA256

      be4e7d36a957f6effb39ee6e4c8fd1723de7cb3718685ad57755825466e204bb

    • SHA512

      006f02d5ab0415f58223d9d4de20f11ad871df47ba5a552b5b9d8ce888f46bc0dcb39bb14a867f82cbb69f7e79819b27ea3f59fa3bf324284ec2a09c6ef8d8f9

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVp:vHW138/iXWlK885rKlGSekcj66ciEp

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks