General

  • Target

    0eb781de51bf989edd869692c26b6ab17863ff3c93aa733cb0d6637c81ae02c6.exe

  • Size

    507KB

  • Sample

    241122-hrfgmawlbz

  • MD5

    08be228d25d342d7d76e3bb621843201

  • SHA1

    717d3fd3706ba34fe32f8e1fb356148b065d37bb

  • SHA256

    0eb781de51bf989edd869692c26b6ab17863ff3c93aa733cb0d6637c81ae02c6

  • SHA512

    8f8d3ee48233f3a5c1f5ac6fb2d788e5968767b5a5f9cf01a78283c32e8f9197fb8531f6f615bb9e104c4d008b14874160f1a0f8e5786086eaf8c8c58bb3ebff

  • SSDEEP

    12288:kdBNKTCqqwXCcdgT89+MvA+BisqYpxHte:kLjQC+fs0M

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.226

218.54.31.165

Targets

    • Target

      0eb781de51bf989edd869692c26b6ab17863ff3c93aa733cb0d6637c81ae02c6.exe

    • Size

      507KB

    • MD5

      08be228d25d342d7d76e3bb621843201

    • SHA1

      717d3fd3706ba34fe32f8e1fb356148b065d37bb

    • SHA256

      0eb781de51bf989edd869692c26b6ab17863ff3c93aa733cb0d6637c81ae02c6

    • SHA512

      8f8d3ee48233f3a5c1f5ac6fb2d788e5968767b5a5f9cf01a78283c32e8f9197fb8531f6f615bb9e104c4d008b14874160f1a0f8e5786086eaf8c8c58bb3ebff

    • SSDEEP

      12288:kdBNKTCqqwXCcdgT89+MvA+BisqYpxHte:kLjQC+fs0M

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks