General

  • Target

    e7ebbb224a3e3fd465ba8be4646569e2bdc346efe57f999abe9876f86d62fda0.exe

  • Size

    440KB

  • Sample

    241123-wh1cbsyqfs

  • MD5

    a40cb26479ed7aa42946772c7b2e7021

  • SHA1

    b768c64e7ba1bb171ac3d0acf1a43390f1d214bf

  • SHA256

    e7ebbb224a3e3fd465ba8be4646569e2bdc346efe57f999abe9876f86d62fda0

  • SHA512

    d60f24ca50d22575a1fdd28636ea6238e5da657a6a9d4ea07eb2a117eef59e4bbe7c442ff9318feeb534779cc6f37a9e743d18eb54b21ed2bd0eeab67c046f22

  • SSDEEP

    6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpjP:oMpASIcWYx2U6hAJQng

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      e7ebbb224a3e3fd465ba8be4646569e2bdc346efe57f999abe9876f86d62fda0.exe

    • Size

      440KB

    • MD5

      a40cb26479ed7aa42946772c7b2e7021

    • SHA1

      b768c64e7ba1bb171ac3d0acf1a43390f1d214bf

    • SHA256

      e7ebbb224a3e3fd465ba8be4646569e2bdc346efe57f999abe9876f86d62fda0

    • SHA512

      d60f24ca50d22575a1fdd28636ea6238e5da657a6a9d4ea07eb2a117eef59e4bbe7c442ff9318feeb534779cc6f37a9e743d18eb54b21ed2bd0eeab67c046f22

    • SSDEEP

      6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpjP:oMpASIcWYx2U6hAJQng

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks