General

  • Target

    c1964d400b55481e956d77346f7ad040e09b272bad96127365fb3e7281d3767c.exe

  • Size

    597KB

  • Sample

    241122-shqlcayqaq

  • MD5

    8fd85ee4b09ceab66733ac13dbf09e1d

  • SHA1

    0bf74e1ba4927b718ae922b89f149fb75236efd0

  • SHA256

    c1964d400b55481e956d77346f7ad040e09b272bad96127365fb3e7281d3767c

  • SHA512

    3ba8695775b981fe2ad4a8ee025dea547d58789213849b2b681448452b2921fe43876dfa7a2aece26aaee3aed10366761c159c1b829ffb5022c997d0fe4dc3bc

  • SSDEEP

    6144:KzU7blKaPcbhj+bB7ktZeRnVDJm0oNjOPdInpB8:MU7MLb4BQkntwNjqdx

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

Targets

    • Target

      c1964d400b55481e956d77346f7ad040e09b272bad96127365fb3e7281d3767c.exe

    • Size

      597KB

    • MD5

      8fd85ee4b09ceab66733ac13dbf09e1d

    • SHA1

      0bf74e1ba4927b718ae922b89f149fb75236efd0

    • SHA256

      c1964d400b55481e956d77346f7ad040e09b272bad96127365fb3e7281d3767c

    • SHA512

      3ba8695775b981fe2ad4a8ee025dea547d58789213849b2b681448452b2921fe43876dfa7a2aece26aaee3aed10366761c159c1b829ffb5022c997d0fe4dc3bc

    • SSDEEP

      6144:KzU7blKaPcbhj+bB7ktZeRnVDJm0oNjOPdInpB8:MU7MLb4BQkntwNjqdx

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks