General

  • Target

    6d07c5b41747406f524ab7a64b2789df6aa7bfef6a654ef0bfb42c1accae67a1.exe

  • Size

    60KB

  • Sample

    241121-jhwmxszmaz

  • MD5

    3bfc5f40fa267b955e157718c545402a

  • SHA1

    9aad00ecb33780e15c68506ec4cdbd4146408fb7

  • SHA256

    6d07c5b41747406f524ab7a64b2789df6aa7bfef6a654ef0bfb42c1accae67a1

  • SHA512

    783e33b1cf025df0a287e72c607bc1f648ef3d2845ec70c209e13e525b279880ff718d0cefb0614e9b6654d53f962bff500e2d03c9108919de495c8bfa9ec335

  • SSDEEP

    768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPY:nK0GjMeQG3iaQREuVZ6ro29p4YxbKd5t

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      6d07c5b41747406f524ab7a64b2789df6aa7bfef6a654ef0bfb42c1accae67a1.exe

    • Size

      60KB

    • MD5

      3bfc5f40fa267b955e157718c545402a

    • SHA1

      9aad00ecb33780e15c68506ec4cdbd4146408fb7

    • SHA256

      6d07c5b41747406f524ab7a64b2789df6aa7bfef6a654ef0bfb42c1accae67a1

    • SHA512

      783e33b1cf025df0a287e72c607bc1f648ef3d2845ec70c209e13e525b279880ff718d0cefb0614e9b6654d53f962bff500e2d03c9108919de495c8bfa9ec335

    • SSDEEP

      768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPY:nK0GjMeQG3iaQREuVZ6ro29p4YxbKd5t

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks