General

  • Target

    51add40369fbcc338e5fde1bee160ebb1b5f7d1f7c4012397f676a14e2ad2b35.exe

  • Size

    60KB

  • Sample

    241123-nh6kcazpck

  • MD5

    9137e251cd1d8cfcab6c26096ef4076f

  • SHA1

    362d43f85a08fe1083bd3d46dc4883d4524f38b9

  • SHA256

    51add40369fbcc338e5fde1bee160ebb1b5f7d1f7c4012397f676a14e2ad2b35

  • SHA512

    66ed672c8664e182eee285e88611385ab63447b06cc8ebb66942ab443464ce2aedaf84afaab715a0b3eb7e86af5781dff6638c2dc7fb251e369bf1088e9812e4

  • SSDEEP

    768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPz:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdrU

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      51add40369fbcc338e5fde1bee160ebb1b5f7d1f7c4012397f676a14e2ad2b35.exe

    • Size

      60KB

    • MD5

      9137e251cd1d8cfcab6c26096ef4076f

    • SHA1

      362d43f85a08fe1083bd3d46dc4883d4524f38b9

    • SHA256

      51add40369fbcc338e5fde1bee160ebb1b5f7d1f7c4012397f676a14e2ad2b35

    • SHA512

      66ed672c8664e182eee285e88611385ab63447b06cc8ebb66942ab443464ce2aedaf84afaab715a0b3eb7e86af5781dff6638c2dc7fb251e369bf1088e9812e4

    • SSDEEP

      768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPz:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdrU

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks