General

  • Target

    07a5aca6c6c133acfe75d623016356d8185bb5777c9df033a6858aef96a6ddc1.exe

  • Size

    435KB

  • Sample

    241121-bkrsraxmay

  • MD5

    3b201875436ad770fa6c1764993e6f57

  • SHA1

    e38476ddebbb73d84ec738b643e4a4d72f3d8e99

  • SHA256

    07a5aca6c6c133acfe75d623016356d8185bb5777c9df033a6858aef96a6ddc1

  • SHA512

    d4e49272f5228bc4b6658e53df4a7165511f14082a77163f4ccaeae25007b292a339b6ff82e379f987cad3988916a0cb7e205a99a4db126198409dea97ddf05a

  • SSDEEP

    6144:iEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpvU:iMpASIcWYx2U6hAJQnX

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      07a5aca6c6c133acfe75d623016356d8185bb5777c9df033a6858aef96a6ddc1.exe

    • Size

      435KB

    • MD5

      3b201875436ad770fa6c1764993e6f57

    • SHA1

      e38476ddebbb73d84ec738b643e4a4d72f3d8e99

    • SHA256

      07a5aca6c6c133acfe75d623016356d8185bb5777c9df033a6858aef96a6ddc1

    • SHA512

      d4e49272f5228bc4b6658e53df4a7165511f14082a77163f4ccaeae25007b292a339b6ff82e379f987cad3988916a0cb7e205a99a4db126198409dea97ddf05a

    • SSDEEP

      6144:iEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpvU:iMpASIcWYx2U6hAJQnX

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks