General

  • Target

    02c3bd1e83a2c0666dd35677cb14109cea5409ea97122b5f0293465da1d19ed4.exe

  • Size

    330KB

  • Sample

    241123-h89f2axmar

  • MD5

    36e5c622f7d4af17d71b4d99058b6373

  • SHA1

    2e318f351e52d0f7fecee5f3138269c7362a072b

  • SHA256

    02c3bd1e83a2c0666dd35677cb14109cea5409ea97122b5f0293465da1d19ed4

  • SHA512

    fb0df7368ce2a02b8e27eb32134123bd0d123d500e85630046ada3ea7a34ca9cb91ee116d54fd7501ec1acd18a1c23d72b4b8ecea47929c82ce9e47a7e3abdaa

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYMOwP:vHW138/iXWlK885rKlGSekcj66ciXP

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      02c3bd1e83a2c0666dd35677cb14109cea5409ea97122b5f0293465da1d19ed4.exe

    • Size

      330KB

    • MD5

      36e5c622f7d4af17d71b4d99058b6373

    • SHA1

      2e318f351e52d0f7fecee5f3138269c7362a072b

    • SHA256

      02c3bd1e83a2c0666dd35677cb14109cea5409ea97122b5f0293465da1d19ed4

    • SHA512

      fb0df7368ce2a02b8e27eb32134123bd0d123d500e85630046ada3ea7a34ca9cb91ee116d54fd7501ec1acd18a1c23d72b4b8ecea47929c82ce9e47a7e3abdaa

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYMOwP:vHW138/iXWlK885rKlGSekcj66ciXP

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks