General

  • Target

    d4c7b27c007526731d30437bc073a62bb364616a002f7f8de68c51af0ee31054.exe

  • Size

    336KB

  • Sample

    241120-zbbbeatcnr

  • MD5

    576b6da86304134c0e1d4bcbbaea25e2

  • SHA1

    66f6b9dd4ae078a635dd0d085602be189702a7f1

  • SHA256

    d4c7b27c007526731d30437bc073a62bb364616a002f7f8de68c51af0ee31054

  • SHA512

    40519e23501af34e1a61b80b0efe180f0a4fa97119f89a43acdbcd96dc07d5b0ddd1d125cfa525729fdc10867a448d44e00bbc763b4023350eab474633c5fd35

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYM:vHW138/iXWlK885rKlGSekcj66cix

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      d4c7b27c007526731d30437bc073a62bb364616a002f7f8de68c51af0ee31054.exe

    • Size

      336KB

    • MD5

      576b6da86304134c0e1d4bcbbaea25e2

    • SHA1

      66f6b9dd4ae078a635dd0d085602be189702a7f1

    • SHA256

      d4c7b27c007526731d30437bc073a62bb364616a002f7f8de68c51af0ee31054

    • SHA512

      40519e23501af34e1a61b80b0efe180f0a4fa97119f89a43acdbcd96dc07d5b0ddd1d125cfa525729fdc10867a448d44e00bbc763b4023350eab474633c5fd35

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYM:vHW138/iXWlK885rKlGSekcj66cix

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks