General

  • Target

    8775518a90249fde425d9410e82d73fe76c2a9dbab4d7578f03af9d98f2d59b6.exe

  • Size

    453KB

  • Sample

    241123-kw1dpsyleq

  • MD5

    7947f03b46684201c10f7db305d25e95

  • SHA1

    5583dc3ca88e971ac3f063256198199b573e3a56

  • SHA256

    8775518a90249fde425d9410e82d73fe76c2a9dbab4d7578f03af9d98f2d59b6

  • SHA512

    2451b3ef6677ae4f46d14c509cf39d030d5997f9f80cfa2eed9f2e08bb5208d01b2ff4364530686c192682622aa90826b3a7d46d8783f70fdbade284b1f75c02

  • SSDEEP

    6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFD:CMpASIcWYx2U6hAJQn+

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      8775518a90249fde425d9410e82d73fe76c2a9dbab4d7578f03af9d98f2d59b6.exe

    • Size

      453KB

    • MD5

      7947f03b46684201c10f7db305d25e95

    • SHA1

      5583dc3ca88e971ac3f063256198199b573e3a56

    • SHA256

      8775518a90249fde425d9410e82d73fe76c2a9dbab4d7578f03af9d98f2d59b6

    • SHA512

      2451b3ef6677ae4f46d14c509cf39d030d5997f9f80cfa2eed9f2e08bb5208d01b2ff4364530686c192682622aa90826b3a7d46d8783f70fdbade284b1f75c02

    • SSDEEP

      6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFD:CMpASIcWYx2U6hAJQn+

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks