General

  • Target

    e3fd3ffc0a4fb6fe6e271cf67fc3799c1f71132d4f28c87092107cf937c576a8N.exe

  • Size

    51KB

  • Sample

    241119-ask5hayeqn

  • MD5

    65349de459189f13cdadde2784006010

  • SHA1

    532619074c8331ed9aca3da4fd28f15633673bd8

  • SHA256

    e3fd3ffc0a4fb6fe6e271cf67fc3799c1f71132d4f28c87092107cf937c576a8

  • SHA512

    734bdfed64f41e6291757f22e9cc72a0c2b37c44bbadd85b59ef519044ee52eb8d37f69bd4d5421e97e946b5231ded22fe1d861647328fb0514673d4b5e5517c

  • SSDEEP

    1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhPU:KsdXfBo/DBJBGzkP5PU

Score
10/10

Malware Config

Extracted

Family

urelas

C2

121.88.5.183

218.54.28.139

Targets

    • Target

      e3fd3ffc0a4fb6fe6e271cf67fc3799c1f71132d4f28c87092107cf937c576a8N.exe

    • Size

      51KB

    • MD5

      65349de459189f13cdadde2784006010

    • SHA1

      532619074c8331ed9aca3da4fd28f15633673bd8

    • SHA256

      e3fd3ffc0a4fb6fe6e271cf67fc3799c1f71132d4f28c87092107cf937c576a8

    • SHA512

      734bdfed64f41e6291757f22e9cc72a0c2b37c44bbadd85b59ef519044ee52eb8d37f69bd4d5421e97e946b5231ded22fe1d861647328fb0514673d4b5e5517c

    • SSDEEP

      1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhPU:KsdXfBo/DBJBGzkP5PU

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks