General

  • Target

    c7fabd61f40cadc250b326cecc46cd525fcd851705c7169d80fd29e5e35b3f46.exe

  • Size

    690KB

  • Sample

    241123-afas1aynbl

  • MD5

    f8781a2b82f220ca4ddbc4aa5c09902a

  • SHA1

    817dc3e1e91c13a244feafbd7cfe97020d170ab6

  • SHA256

    c7fabd61f40cadc250b326cecc46cd525fcd851705c7169d80fd29e5e35b3f46

  • SHA512

    046b33a6024b265eafee8ea1997acf07467904e5f2422e5e662e8def4ea896ba1928b82e96fc391fd2c1ef8eddbff2efa0fb786fc608d2a308959182db59e12a

  • SSDEEP

    12288:LUyI6hJQglQA0IWb8DmPySxEuBZDxywHBlP94jpguwDxXlZ1nA:dVh6gl6Iy8R9+ZdnnP94jpgl9BnA

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

Targets

    • Target

      c7fabd61f40cadc250b326cecc46cd525fcd851705c7169d80fd29e5e35b3f46.exe

    • Size

      690KB

    • MD5

      f8781a2b82f220ca4ddbc4aa5c09902a

    • SHA1

      817dc3e1e91c13a244feafbd7cfe97020d170ab6

    • SHA256

      c7fabd61f40cadc250b326cecc46cd525fcd851705c7169d80fd29e5e35b3f46

    • SHA512

      046b33a6024b265eafee8ea1997acf07467904e5f2422e5e662e8def4ea896ba1928b82e96fc391fd2c1ef8eddbff2efa0fb786fc608d2a308959182db59e12a

    • SSDEEP

      12288:LUyI6hJQglQA0IWb8DmPySxEuBZDxywHBlP94jpguwDxXlZ1nA:dVh6gl6Iy8R9+ZdnnP94jpgl9BnA

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks