General

  • Target

    07fc5dee5d8f828ce366aafc33f0a66df73876b8a4a350cabd1a52ae540c6bca.exe

  • Size

    330KB

  • Sample

    241122-rv8r1ssmdv

  • MD5

    0287a47c2cd95341f1ab1b29438eac59

  • SHA1

    228e48db10142555d09e612015cc860603df4aed

  • SHA256

    07fc5dee5d8f828ce366aafc33f0a66df73876b8a4a350cabd1a52ae540c6bca

  • SHA512

    c3e45428955053a8529237f908b711cc2ece3487f284ea92824036ce1080f2071447829040dfae389e6ccf15deddf220ba92998ec60ad95370c33562c567dbdb

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYMOF+:vHW138/iXWlK885rKlGSekcj66ciq+

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      07fc5dee5d8f828ce366aafc33f0a66df73876b8a4a350cabd1a52ae540c6bca.exe

    • Size

      330KB

    • MD5

      0287a47c2cd95341f1ab1b29438eac59

    • SHA1

      228e48db10142555d09e612015cc860603df4aed

    • SHA256

      07fc5dee5d8f828ce366aafc33f0a66df73876b8a4a350cabd1a52ae540c6bca

    • SHA512

      c3e45428955053a8529237f908b711cc2ece3487f284ea92824036ce1080f2071447829040dfae389e6ccf15deddf220ba92998ec60ad95370c33562c567dbdb

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYMOF+:vHW138/iXWlK885rKlGSekcj66ciq+

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks