General

  • Target

    0d01d9e0a15de1f5997f36af6ac862b6405a572c15a42bb3b918345b881687a3.exe

  • Size

    403KB

  • Sample

    241122-ly893aylez

  • MD5

    d1c773e84eeb50f6b2964cc7d94b6fdf

  • SHA1

    e78828b1a72b9025538dd7ee15efdff12939576e

  • SHA256

    0d01d9e0a15de1f5997f36af6ac862b6405a572c15a42bb3b918345b881687a3

  • SHA512

    c3c9c4aa3a7a3bb896f4939531a9f810fea888db2534ec8fb99ba4522ac283806494f92c2b2feacaa711b8e1dd1b0c5e8da2f59dfdd4d7e6cc92cbf38712e4a4

  • SSDEEP

    6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohq:8IfBoDWoyFblU6hAJQnOA

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      0d01d9e0a15de1f5997f36af6ac862b6405a572c15a42bb3b918345b881687a3.exe

    • Size

      403KB

    • MD5

      d1c773e84eeb50f6b2964cc7d94b6fdf

    • SHA1

      e78828b1a72b9025538dd7ee15efdff12939576e

    • SHA256

      0d01d9e0a15de1f5997f36af6ac862b6405a572c15a42bb3b918345b881687a3

    • SHA512

      c3c9c4aa3a7a3bb896f4939531a9f810fea888db2534ec8fb99ba4522ac283806494f92c2b2feacaa711b8e1dd1b0c5e8da2f59dfdd4d7e6cc92cbf38712e4a4

    • SSDEEP

      6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohq:8IfBoDWoyFblU6hAJQnOA

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks