General

  • Target

    f485252fe6ce56b04634ae86940df732cb2eb6b2f8dcddc485654bb9d2e79b04N.exe

  • Size

    65KB

  • Sample

    241119-qrfrdsxcrj

  • MD5

    7b21ff621233c2d543b7df119a3dca70

  • SHA1

    56cd210cdc0d22d11683f108ff50abbd178c342e

  • SHA256

    f485252fe6ce56b04634ae86940df732cb2eb6b2f8dcddc485654bb9d2e79b04

  • SHA512

    04833a0eb479f874be05280a7198ed41e63e94ac5f6d3c54fe4df3100a68194537b3b41a2ace2186b1315858cb56dc071952149fb0b890f5c32d04d5191be0bc

  • SSDEEP

    1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTm/j:6bQRSHpAvzyf7MzeTYj

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      f485252fe6ce56b04634ae86940df732cb2eb6b2f8dcddc485654bb9d2e79b04N.exe

    • Size

      65KB

    • MD5

      7b21ff621233c2d543b7df119a3dca70

    • SHA1

      56cd210cdc0d22d11683f108ff50abbd178c342e

    • SHA256

      f485252fe6ce56b04634ae86940df732cb2eb6b2f8dcddc485654bb9d2e79b04

    • SHA512

      04833a0eb479f874be05280a7198ed41e63e94ac5f6d3c54fe4df3100a68194537b3b41a2ace2186b1315858cb56dc071952149fb0b890f5c32d04d5191be0bc

    • SSDEEP

      1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTm/j:6bQRSHpAvzyf7MzeTYj

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks