General

  • Target

    daa7b5dca06e54f27db21d13961ef00adb564c8d59f7cc9948f6ffc172c69215N.exe

  • Size

    50KB

  • Sample

    241119-t454laxrhz

  • MD5

    2743420ec42947d037ee9a6c07198d60

  • SHA1

    db75ed36a9b8f4a9ba633f55a7de753b0f52b789

  • SHA256

    daa7b5dca06e54f27db21d13961ef00adb564c8d59f7cc9948f6ffc172c69215

  • SHA512

    665dc207bd9100789b50a3ccbdc9fe32e6edabdfb8d3039163ffcfcfe543103a825a4779bce9aadc5c219cfa6833f7bc51a0ef44995278721a8014dc83566ca8

  • SSDEEP

    1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhd:KsdXfBo/DBJBGzkP5d

Score
10/10

Malware Config

Extracted

Family

urelas

C2

121.88.5.183

218.54.28.139

Targets

    • Target

      daa7b5dca06e54f27db21d13961ef00adb564c8d59f7cc9948f6ffc172c69215N.exe

    • Size

      50KB

    • MD5

      2743420ec42947d037ee9a6c07198d60

    • SHA1

      db75ed36a9b8f4a9ba633f55a7de753b0f52b789

    • SHA256

      daa7b5dca06e54f27db21d13961ef00adb564c8d59f7cc9948f6ffc172c69215

    • SHA512

      665dc207bd9100789b50a3ccbdc9fe32e6edabdfb8d3039163ffcfcfe543103a825a4779bce9aadc5c219cfa6833f7bc51a0ef44995278721a8014dc83566ca8

    • SSDEEP

      1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhd:KsdXfBo/DBJBGzkP5d

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks