General

  • Target

    ae014d05ee4afc5503ce5290042909cd522680674b86081a92b21542bc441b8a.exe

  • Size

    60KB

  • Sample

    241121-jnt2aazmfz

  • MD5

    51fe9243b56d52f7af12ec03e66e6f7f

  • SHA1

    5cf51d94554df073ace32854648a2b9964bd5710

  • SHA256

    ae014d05ee4afc5503ce5290042909cd522680674b86081a92b21542bc441b8a

  • SHA512

    24170306cc8522089ea2852f228ae478fc005f1b9289cfa0290b23d3c29bdbe4bc83ed153de3068a9bc90a31a15e1e94a12718bb33121b844544c5d685c2438b

  • SSDEEP

    768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxP1:nK0GjMeQG3iaQREuVZ6ro29p4YxbKd9y

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      ae014d05ee4afc5503ce5290042909cd522680674b86081a92b21542bc441b8a.exe

    • Size

      60KB

    • MD5

      51fe9243b56d52f7af12ec03e66e6f7f

    • SHA1

      5cf51d94554df073ace32854648a2b9964bd5710

    • SHA256

      ae014d05ee4afc5503ce5290042909cd522680674b86081a92b21542bc441b8a

    • SHA512

      24170306cc8522089ea2852f228ae478fc005f1b9289cfa0290b23d3c29bdbe4bc83ed153de3068a9bc90a31a15e1e94a12718bb33121b844544c5d685c2438b

    • SSDEEP

      768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxP1:nK0GjMeQG3iaQREuVZ6ro29p4YxbKd9y

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks