General

  • Target

    cb929e02857192e8bd260cb769d09c6f38fbfb33040763b5c0350f8e939b6a91.exe

  • Size

    60KB

  • Sample

    241122-lvt1zaylby

  • MD5

    5d414a4fdf6d1283314be0eefd85c083

  • SHA1

    41fbc9e88a3705d7593ea323d362f4c14b802102

  • SHA256

    cb929e02857192e8bd260cb769d09c6f38fbfb33040763b5c0350f8e939b6a91

  • SHA512

    f5b12833533920dcc952b07965bb21017a07aa38ac974c39b564ca8d8c6c4f63983ab93657bf5da4a664bd78532e99c8d5fd9eb2d93c2e1c9f9a27e03cb9dc60

  • SSDEEP

    768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPX:nK0GjMeQG3iaQREuVZ6ro29p4YxbKd5I

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      cb929e02857192e8bd260cb769d09c6f38fbfb33040763b5c0350f8e939b6a91.exe

    • Size

      60KB

    • MD5

      5d414a4fdf6d1283314be0eefd85c083

    • SHA1

      41fbc9e88a3705d7593ea323d362f4c14b802102

    • SHA256

      cb929e02857192e8bd260cb769d09c6f38fbfb33040763b5c0350f8e939b6a91

    • SHA512

      f5b12833533920dcc952b07965bb21017a07aa38ac974c39b564ca8d8c6c4f63983ab93657bf5da4a664bd78532e99c8d5fd9eb2d93c2e1c9f9a27e03cb9dc60

    • SSDEEP

      768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPX:nK0GjMeQG3iaQREuVZ6ro29p4YxbKd5I

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks