General

  • Target

    b00388dce92ba1b56f044c989663885b4cbb10f965dc39274ea50d8c126c1d79.exe

  • Size

    60KB

  • Sample

    241123-31qzyazkgq

  • MD5

    430213a727cbd92c90a2ed7bec66cc4b

  • SHA1

    c9ea8e184fa92f9e89536d4f4c545a9dba6df7dc

  • SHA256

    b00388dce92ba1b56f044c989663885b4cbb10f965dc39274ea50d8c126c1d79

  • SHA512

    34bf5cbbd5675121cba88e6409342832e6c5ca1017e3b81e8b4750e32b967b3c69c77e926df82f66bb52a3f1c5767d3b809d18eaa3b9a72bae0a94c793f0a970

  • SSDEEP

    768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPV:nK0GjMeQG3iaQREuVZ6ro29p4YxbKd9e

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      b00388dce92ba1b56f044c989663885b4cbb10f965dc39274ea50d8c126c1d79.exe

    • Size

      60KB

    • MD5

      430213a727cbd92c90a2ed7bec66cc4b

    • SHA1

      c9ea8e184fa92f9e89536d4f4c545a9dba6df7dc

    • SHA256

      b00388dce92ba1b56f044c989663885b4cbb10f965dc39274ea50d8c126c1d79

    • SHA512

      34bf5cbbd5675121cba88e6409342832e6c5ca1017e3b81e8b4750e32b967b3c69c77e926df82f66bb52a3f1c5767d3b809d18eaa3b9a72bae0a94c793f0a970

    • SSDEEP

      768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPV:nK0GjMeQG3iaQREuVZ6ro29p4YxbKd9e

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks