General

  • Target

    59b97bbc98517ca3522b4b127040747c231195806e839efeadd3017869255b0d.exe

  • Size

    60KB

  • Sample

    241123-hrw5dazrhv

  • MD5

    4da3a323043dd78c587899c1facff863

  • SHA1

    1adc2362a27a6d6ebd4f607d8afa557f7428d8ec

  • SHA256

    59b97bbc98517ca3522b4b127040747c231195806e839efeadd3017869255b0d

  • SHA512

    fa314aff1bd710cccb47f125b5f3bceb6ec4f137e3b5fea5fd3866366413632de736049c52c1fad03ac995b0463f0a9e14214dae29c247d0ff39777c6c072918

  • SSDEEP

    768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPr:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdM

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      59b97bbc98517ca3522b4b127040747c231195806e839efeadd3017869255b0d.exe

    • Size

      60KB

    • MD5

      4da3a323043dd78c587899c1facff863

    • SHA1

      1adc2362a27a6d6ebd4f607d8afa557f7428d8ec

    • SHA256

      59b97bbc98517ca3522b4b127040747c231195806e839efeadd3017869255b0d

    • SHA512

      fa314aff1bd710cccb47f125b5f3bceb6ec4f137e3b5fea5fd3866366413632de736049c52c1fad03ac995b0463f0a9e14214dae29c247d0ff39777c6c072918

    • SSDEEP

      768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPr:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdM

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks