General

  • Target

    3b38733fbb8b334d6e8e53cc0d0238dd141cd07f49b55cc6bae21e86b0fe8fd7.exe

  • Size

    690KB

  • Sample

    241123-c9wnnswney

  • MD5

    47fdaedf02f5c6ee63fe3a5d1e2a727c

  • SHA1

    c9f85c47d90fdcd626286c1ab4b9d705c13d3e2b

  • SHA256

    3b38733fbb8b334d6e8e53cc0d0238dd141cd07f49b55cc6bae21e86b0fe8fd7

  • SHA512

    9dbbcab9d7d8c260c8e631f68503614691c0b3055265f5d120d4a809121e18eee324096d6e02af2675c3615047c1ea6314f480fa70831de14a6f3c474de7d86b

  • SSDEEP

    12288:LUyI6hJQglQA0IWb8DmPySxEuBZDxywHBlP94jpguwDxXlZ1nc:dVh6gl6Iy8R9+ZdnnP94jpgl9Bnc

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

Targets

    • Target

      3b38733fbb8b334d6e8e53cc0d0238dd141cd07f49b55cc6bae21e86b0fe8fd7.exe

    • Size

      690KB

    • MD5

      47fdaedf02f5c6ee63fe3a5d1e2a727c

    • SHA1

      c9f85c47d90fdcd626286c1ab4b9d705c13d3e2b

    • SHA256

      3b38733fbb8b334d6e8e53cc0d0238dd141cd07f49b55cc6bae21e86b0fe8fd7

    • SHA512

      9dbbcab9d7d8c260c8e631f68503614691c0b3055265f5d120d4a809121e18eee324096d6e02af2675c3615047c1ea6314f480fa70831de14a6f3c474de7d86b

    • SSDEEP

      12288:LUyI6hJQglQA0IWb8DmPySxEuBZDxywHBlP94jpguwDxXlZ1nc:dVh6gl6Iy8R9+ZdnnP94jpgl9Bnc

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks