General

  • Target

    558367d11736d5ed87bc4038db2ec9a67cb0c79da07a269e043f2fb7063189c4.exe

  • Size

    441KB

  • Sample

    241123-n82zvavjbx

  • MD5

    843997ebd749579ffd00b2a9fe6284de

  • SHA1

    a7443e907bf47fb2b4b16f84ae9235ae90d73ff7

  • SHA256

    558367d11736d5ed87bc4038db2ec9a67cb0c79da07a269e043f2fb7063189c4

  • SHA512

    437db5146230455e04798bb2e2c87ed8313880d03450e766450b4508beb12aee63d290d67e0f3d65e8fd9ee04618fbe1a1b1cbff91011891d388a5777ab2e093

  • SSDEEP

    6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpjg:oMpASIcWYx2U6hAJQnn

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      558367d11736d5ed87bc4038db2ec9a67cb0c79da07a269e043f2fb7063189c4.exe

    • Size

      441KB

    • MD5

      843997ebd749579ffd00b2a9fe6284de

    • SHA1

      a7443e907bf47fb2b4b16f84ae9235ae90d73ff7

    • SHA256

      558367d11736d5ed87bc4038db2ec9a67cb0c79da07a269e043f2fb7063189c4

    • SHA512

      437db5146230455e04798bb2e2c87ed8313880d03450e766450b4508beb12aee63d290d67e0f3d65e8fd9ee04618fbe1a1b1cbff91011891d388a5777ab2e093

    • SSDEEP

      6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpjg:oMpASIcWYx2U6hAJQnn

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks