General

  • Target

    08aead7273082b7d71818151a30eb3b88a53a7363fa014b7d250ec98e31f273c.exe

  • Size

    334KB

  • Sample

    241119-ldymtsthkr

  • MD5

    a028ad301750d80f90286320c4447dd0

  • SHA1

    d21f9b6e7516b5af96caaaaf600f2cdef94fa9cf

  • SHA256

    08aead7273082b7d71818151a30eb3b88a53a7363fa014b7d250ec98e31f273c

  • SHA512

    0d31a15091e37fe85b65b16dbc4bc8adb6f66987913824c160ab708047d51a3f96fa946a6553705cd4b39bbd9709c2d238950719e5ee14d2e0f82a9db23efdba

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYm:vHW138/iXWlK885rKlGSekcj66cix

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      08aead7273082b7d71818151a30eb3b88a53a7363fa014b7d250ec98e31f273c.exe

    • Size

      334KB

    • MD5

      a028ad301750d80f90286320c4447dd0

    • SHA1

      d21f9b6e7516b5af96caaaaf600f2cdef94fa9cf

    • SHA256

      08aead7273082b7d71818151a30eb3b88a53a7363fa014b7d250ec98e31f273c

    • SHA512

      0d31a15091e37fe85b65b16dbc4bc8adb6f66987913824c160ab708047d51a3f96fa946a6553705cd4b39bbd9709c2d238950719e5ee14d2e0f82a9db23efdba

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYm:vHW138/iXWlK885rKlGSekcj66cix

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks