General

  • Target

    07a7f7132bb4f75c48b174119c2be06ff590bd686680f0245900a9adc001a60f.exe

  • Size

    299KB

  • Sample

    241123-vhtzwavkdr

  • MD5

    961734c10247ab1d4672d4956693ec99

  • SHA1

    3651660af03d37f27af50e2b002cb614c0b619cd

  • SHA256

    07a7f7132bb4f75c48b174119c2be06ff590bd686680f0245900a9adc001a60f

  • SHA512

    7ff8d2bd5d75ea18697f11bd8e9bf80cddccf5bb9960e55caad550a680021445c08da1eac0550dbd285e7ec5e4d99084eeeb1dc5519dd4fe0bdd4c96030d53d3

  • SSDEEP

    6144:kN43gKpDPeVvnAmZ64XMxvQ4x1OpGcm9VQl0lM/oJ4/gupXSz:Y4npK2y8zzkGHVqoq/gK8

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

Targets

    • Target

      07a7f7132bb4f75c48b174119c2be06ff590bd686680f0245900a9adc001a60f.exe

    • Size

      299KB

    • MD5

      961734c10247ab1d4672d4956693ec99

    • SHA1

      3651660af03d37f27af50e2b002cb614c0b619cd

    • SHA256

      07a7f7132bb4f75c48b174119c2be06ff590bd686680f0245900a9adc001a60f

    • SHA512

      7ff8d2bd5d75ea18697f11bd8e9bf80cddccf5bb9960e55caad550a680021445c08da1eac0550dbd285e7ec5e4d99084eeeb1dc5519dd4fe0bdd4c96030d53d3

    • SSDEEP

      6144:kN43gKpDPeVvnAmZ64XMxvQ4x1OpGcm9VQl0lM/oJ4/gupXSz:Y4npK2y8zzkGHVqoq/gK8

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks