General

  • Target

    22fe8b86056cc28b39eed6b539e447af5ab0b036329784978a849b316e3fc429.exe

  • Size

    621KB

  • Sample

    241121-ahrjja1ldm

  • MD5

    f61a413e1e72f6b12bafe0daf6a43065

  • SHA1

    749c7a8634e4e761c6a25beb5e9d1708e115adc4

  • SHA256

    22fe8b86056cc28b39eed6b539e447af5ab0b036329784978a849b316e3fc429

  • SHA512

    41ea3f80938116195484ca47c98d1682541a9e1b9e9461163f5533c5f0f1ac39c913f24e7cdefb24197a90c084f3b539bf48c1a1eb92a5d86eb1db2ef0fa6934

  • SSDEEP

    6144:imbmLppYOuakYGWV5Q4XMxvQ4x1OpGcm9VQl0lM/oJ4/gupXWyKV:ima6idv8zzkGHVqoq/gKWd

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

Targets

    • Target

      22fe8b86056cc28b39eed6b539e447af5ab0b036329784978a849b316e3fc429.exe

    • Size

      621KB

    • MD5

      f61a413e1e72f6b12bafe0daf6a43065

    • SHA1

      749c7a8634e4e761c6a25beb5e9d1708e115adc4

    • SHA256

      22fe8b86056cc28b39eed6b539e447af5ab0b036329784978a849b316e3fc429

    • SHA512

      41ea3f80938116195484ca47c98d1682541a9e1b9e9461163f5533c5f0f1ac39c913f24e7cdefb24197a90c084f3b539bf48c1a1eb92a5d86eb1db2ef0fa6934

    • SSDEEP

      6144:imbmLppYOuakYGWV5Q4XMxvQ4x1OpGcm9VQl0lM/oJ4/gupXWyKV:ima6idv8zzkGHVqoq/gKWd

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks