General

  • Target

    23d278aaf68acace9108d15d3ae47628810d544d4fdd7a3e6808efd927e37a1d.exe

  • Size

    404KB

  • Sample

    241122-lhpwgstram

  • MD5

    984678a2778ad4da6b797e68b64f1571

  • SHA1

    572ab643708abc1ccdcc76f07d7ccae243015fb3

  • SHA256

    23d278aaf68acace9108d15d3ae47628810d544d4fdd7a3e6808efd927e37a1d

  • SHA512

    f287f6b79f176884745cd1e3f28fb2d8284d9bf7b05ecfdd212e00def7fbd4baa6de51c654496d01b2d742c2acc3ad922842581c51d2fdb2f92d397be40346db

  • SSDEEP

    6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohQ:8IfBoDWoyFblU6hAJQnOS

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      23d278aaf68acace9108d15d3ae47628810d544d4fdd7a3e6808efd927e37a1d.exe

    • Size

      404KB

    • MD5

      984678a2778ad4da6b797e68b64f1571

    • SHA1

      572ab643708abc1ccdcc76f07d7ccae243015fb3

    • SHA256

      23d278aaf68acace9108d15d3ae47628810d544d4fdd7a3e6808efd927e37a1d

    • SHA512

      f287f6b79f176884745cd1e3f28fb2d8284d9bf7b05ecfdd212e00def7fbd4baa6de51c654496d01b2d742c2acc3ad922842581c51d2fdb2f92d397be40346db

    • SSDEEP

      6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohQ:8IfBoDWoyFblU6hAJQnOS

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks