General

  • Target

    a4308254b8768c0b8e4811a8dcf3caef6e21d3c3ae44643757f934ab0b7cf05b.exe

  • Size

    188KB

  • Sample

    241122-qvlf2s1pg1

  • MD5

    0344165587d1b79516dbe3519d5c387c

  • SHA1

    f74bb0d511fa1dda7d2ff917599e9721b46d3f78

  • SHA256

    a4308254b8768c0b8e4811a8dcf3caef6e21d3c3ae44643757f934ab0b7cf05b

  • SHA512

    f95f0543522e2c912b1cc130623cee1bc10778669dbabb1523661fbe155cb1dff946274240112fd5a51e55c280a7c54688edfb5457fdbd7aa7cbc28a68961e68

  • SSDEEP

    1536:TPwN8ukP5sZK20EGIBpwW6NeleEQ77nuUWXJmU2Ajpf8oI4KEAUgJM:Thuk8QsH47nW5ppkoI4KEAUgJM

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      a4308254b8768c0b8e4811a8dcf3caef6e21d3c3ae44643757f934ab0b7cf05b.exe

    • Size

      188KB

    • MD5

      0344165587d1b79516dbe3519d5c387c

    • SHA1

      f74bb0d511fa1dda7d2ff917599e9721b46d3f78

    • SHA256

      a4308254b8768c0b8e4811a8dcf3caef6e21d3c3ae44643757f934ab0b7cf05b

    • SHA512

      f95f0543522e2c912b1cc130623cee1bc10778669dbabb1523661fbe155cb1dff946274240112fd5a51e55c280a7c54688edfb5457fdbd7aa7cbc28a68961e68

    • SSDEEP

      1536:TPwN8ukP5sZK20EGIBpwW6NeleEQ77nuUWXJmU2Ajpf8oI4KEAUgJM:Thuk8QsH47nW5ppkoI4KEAUgJM

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks