General

  • Target

    a8f465852b204bf3b159c4624ca9accf4fb90b01ccb8b9775e35c0c4c8757be5.exe

  • Size

    140KB

  • Sample

    241122-yg19catkbr

  • MD5

    911fcedac2288feb9b40d3d554a35c48

  • SHA1

    20049de78dbb85134a24ebcf63b4cbd340712339

  • SHA256

    a8f465852b204bf3b159c4624ca9accf4fb90b01ccb8b9775e35c0c4c8757be5

  • SHA512

    065d6f220bce7aa4e91e74cea0baf85bf50da71bdc4f6c0f08725aefacdbeb20e465c15ea13431c7a2b3b4ca36a98c7137e906ad3fd3e8d94b04dd822cf1c8a7

  • SSDEEP

    1536:P/oEkqfCZ10zcT9Yh8AIXcjyz9cOXfiXGImcatMrsWjcdf6odgR5APfI9:P/5kqCxiXEcO3XfGf2tMUf6odgR5A49

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      a8f465852b204bf3b159c4624ca9accf4fb90b01ccb8b9775e35c0c4c8757be5.exe

    • Size

      140KB

    • MD5

      911fcedac2288feb9b40d3d554a35c48

    • SHA1

      20049de78dbb85134a24ebcf63b4cbd340712339

    • SHA256

      a8f465852b204bf3b159c4624ca9accf4fb90b01ccb8b9775e35c0c4c8757be5

    • SHA512

      065d6f220bce7aa4e91e74cea0baf85bf50da71bdc4f6c0f08725aefacdbeb20e465c15ea13431c7a2b3b4ca36a98c7137e906ad3fd3e8d94b04dd822cf1c8a7

    • SSDEEP

      1536:P/oEkqfCZ10zcT9Yh8AIXcjyz9cOXfiXGImcatMrsWjcdf6odgR5APfI9:P/5kqCxiXEcO3XfGf2tMUf6odgR5A49

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks