General

  • Target

    862a38f6e34687da7183713e8246e8c3d7b4d6eca9fafb36da705683b14ef60c.exe

  • Size

    192KB

  • Sample

    241122-n4t4faznew

  • MD5

    5d3781d01a072727ceaf41e54b6faad2

  • SHA1

    c8ab2f99c7562ec176511a6f80c8cfcfbb0de277

  • SHA256

    862a38f6e34687da7183713e8246e8c3d7b4d6eca9fafb36da705683b14ef60c

  • SHA512

    7931adcdb59bb758b4d1a53f660bc4a1495a4a3bd454ef22d651ac7405bb25df3cadca22f27fb39c43e9606a0b6364cd761cd524a4389a55f0dfd3b84c0c51d6

  • SSDEEP

    3072:gAwixCZ6Sh77R2Gpf606U8v0e7OIgPDFIbbzhPM67fIhO:gExhk7rh7NEOIYWlPM6r6O

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      862a38f6e34687da7183713e8246e8c3d7b4d6eca9fafb36da705683b14ef60c.exe

    • Size

      192KB

    • MD5

      5d3781d01a072727ceaf41e54b6faad2

    • SHA1

      c8ab2f99c7562ec176511a6f80c8cfcfbb0de277

    • SHA256

      862a38f6e34687da7183713e8246e8c3d7b4d6eca9fafb36da705683b14ef60c

    • SHA512

      7931adcdb59bb758b4d1a53f660bc4a1495a4a3bd454ef22d651ac7405bb25df3cadca22f27fb39c43e9606a0b6364cd761cd524a4389a55f0dfd3b84c0c51d6

    • SSDEEP

      3072:gAwixCZ6Sh77R2Gpf606U8v0e7OIgPDFIbbzhPM67fIhO:gExhk7rh7NEOIYWlPM6r6O

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks