General

  • Target

    5a5cefab37f78e90efdd6d0ce940bfec022f64a6702b856a704a6500d5e4756d.exe

  • Size

    784KB

  • Sample

    241123-wds3fsvqdk

  • MD5

    bbec813948c72f96a34ad5b3b10fd118

  • SHA1

    03db2340afe0ae7d2d216edfc880ed36bfd6da9d

  • SHA256

    5a5cefab37f78e90efdd6d0ce940bfec022f64a6702b856a704a6500d5e4756d

  • SHA512

    0c10dc61b10143e201660e20ac0fa4e4edb2ac1ffa7862d3e3572f923886e31669583498ee54ead67453724134ded9e6b4da1331a4b353e1c53215b40ffc4239

  • SSDEEP

    12288:d7dL4AkwWNk82HAEGfKKBhVGT5OY8pgA65t8mv5pThkJ8HxW0d8GYEgn:d7dLBftJLW5YUWLrkJB0PJgn

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      5a5cefab37f78e90efdd6d0ce940bfec022f64a6702b856a704a6500d5e4756d.exe

    • Size

      784KB

    • MD5

      bbec813948c72f96a34ad5b3b10fd118

    • SHA1

      03db2340afe0ae7d2d216edfc880ed36bfd6da9d

    • SHA256

      5a5cefab37f78e90efdd6d0ce940bfec022f64a6702b856a704a6500d5e4756d

    • SHA512

      0c10dc61b10143e201660e20ac0fa4e4edb2ac1ffa7862d3e3572f923886e31669583498ee54ead67453724134ded9e6b4da1331a4b353e1c53215b40ffc4239

    • SSDEEP

      12288:d7dL4AkwWNk82HAEGfKKBhVGT5OY8pgA65t8mv5pThkJ8HxW0d8GYEgn:d7dLBftJLW5YUWLrkJB0PJgn

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks