General

  • Target

    1c090372856b7b3074df1c2259707d1d3a23a08f02c1ce30ed79ccbb1975d7e3.exe

  • Size

    450KB

  • Sample

    241122-kkhphsxnfz

  • MD5

    536da247a62bf70f370825f5cdf58b99

  • SHA1

    a5a3655d28c08d38c72b8ad71859b14f1661ffc9

  • SHA256

    1c090372856b7b3074df1c2259707d1d3a23a08f02c1ce30ed79ccbb1975d7e3

  • SHA512

    0d675bde335e7ea5765ef011ed5c428424a7b0720a3a71c403305cd0aada8a8f58bdaf277a976d9eeecd86f2e773aec81b6802e2eeaefbc4052722540187374a

  • SSDEEP

    6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFTA:CMpASIcWYx2U6hAJQnx

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      1c090372856b7b3074df1c2259707d1d3a23a08f02c1ce30ed79ccbb1975d7e3.exe

    • Size

      450KB

    • MD5

      536da247a62bf70f370825f5cdf58b99

    • SHA1

      a5a3655d28c08d38c72b8ad71859b14f1661ffc9

    • SHA256

      1c090372856b7b3074df1c2259707d1d3a23a08f02c1ce30ed79ccbb1975d7e3

    • SHA512

      0d675bde335e7ea5765ef011ed5c428424a7b0720a3a71c403305cd0aada8a8f58bdaf277a976d9eeecd86f2e773aec81b6802e2eeaefbc4052722540187374a

    • SSDEEP

      6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFTA:CMpASIcWYx2U6hAJQnx

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks