General

  • Target

    1174aece1d348e3403e13330b647d34c11905f3420bb35d1cb91b47799240bab.exe

  • Size

    68KB

  • Sample

    241119-nvlqpszran

  • MD5

    209c290527929d775894785ee19232e8

  • SHA1

    d4377346fa464bb497cec55748d96fd6a2cff015

  • SHA256

    1174aece1d348e3403e13330b647d34c11905f3420bb35d1cb91b47799240bab

  • SHA512

    5b74f3a9b55f9be4153ac0d0f1bb40c53ba67103e1215e793d3a4912aeb1c028a8b5e5b1ca541fcb37c50396349a45aaa78ddc9d0a33b9e664f8987156191bd6

  • SSDEEP

    1536:04/WgLAjdZsp+uChoLnDeoqYAJjvLFymnHsPeOrG:l//AjMp+u2onejH2PeEG

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      1174aece1d348e3403e13330b647d34c11905f3420bb35d1cb91b47799240bab.exe

    • Size

      68KB

    • MD5

      209c290527929d775894785ee19232e8

    • SHA1

      d4377346fa464bb497cec55748d96fd6a2cff015

    • SHA256

      1174aece1d348e3403e13330b647d34c11905f3420bb35d1cb91b47799240bab

    • SHA512

      5b74f3a9b55f9be4153ac0d0f1bb40c53ba67103e1215e793d3a4912aeb1c028a8b5e5b1ca541fcb37c50396349a45aaa78ddc9d0a33b9e664f8987156191bd6

    • SSDEEP

      1536:04/WgLAjdZsp+uChoLnDeoqYAJjvLFymnHsPeOrG:l//AjMp+u2onejH2PeEG

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks