General

  • Target

    c6ebbf4d336d65dcda38cfbd48f7c87975128164455cd210ac905a8234b2df05.exe

  • Size

    467KB

  • Sample

    241123-r5njtswrbw

  • MD5

    7706177362adc24d303635b85b477ea9

  • SHA1

    f896fd35b6a0a4c4f14abb72273b9c96f1aacc9b

  • SHA256

    c6ebbf4d336d65dcda38cfbd48f7c87975128164455cd210ac905a8234b2df05

  • SHA512

    b4d2fc0e851a89b29e24d14a2ceae4fcd119aca4d578982101c33cc661d81cd218389ae4a6186682651c200fc3de912c5e5871ec2609ea78ea3170317cc7ce8e

  • SSDEEP

    12288:93CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mp:9x9GzHlTv/b35tecFB62

Score
10/10

Malware Config

Extracted

Family

urelas

C2

121.88.5.183

121.88.5.184

Targets

    • Target

      c6ebbf4d336d65dcda38cfbd48f7c87975128164455cd210ac905a8234b2df05.exe

    • Size

      467KB

    • MD5

      7706177362adc24d303635b85b477ea9

    • SHA1

      f896fd35b6a0a4c4f14abb72273b9c96f1aacc9b

    • SHA256

      c6ebbf4d336d65dcda38cfbd48f7c87975128164455cd210ac905a8234b2df05

    • SHA512

      b4d2fc0e851a89b29e24d14a2ceae4fcd119aca4d578982101c33cc661d81cd218389ae4a6186682651c200fc3de912c5e5871ec2609ea78ea3170317cc7ce8e

    • SSDEEP

      12288:93CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mp:9x9GzHlTv/b35tecFB62

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks