General

  • Target

    484c8ff25014b303114502ae99d8bbafb881666717488815bb4bde876ae191c4.exe

  • Size

    268KB

  • Sample

    241123-xrjlls1nbt

  • MD5

    ea6ae432212770ccc7a120110fc9e9d2

  • SHA1

    0f78c4e61d43182e0445ffb49ed80e2f2d678ed6

  • SHA256

    484c8ff25014b303114502ae99d8bbafb881666717488815bb4bde876ae191c4

  • SHA512

    5f54f980cb8b09df9575b08f124621f503a7db33cd4c5bc5003d185d3033e60ad703d882e5941dab95fe4d86a81eea099df4b1d885ffb5bef363793a56f2b99d

  • SSDEEP

    3072:AUApueDWSppTaeskDEjUrqfkZ557YzAL9gFoI3X3fZE5UANax:ASeyGpTaesaQUufkL57YsL9NIx9ANax

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      484c8ff25014b303114502ae99d8bbafb881666717488815bb4bde876ae191c4.exe

    • Size

      268KB

    • MD5

      ea6ae432212770ccc7a120110fc9e9d2

    • SHA1

      0f78c4e61d43182e0445ffb49ed80e2f2d678ed6

    • SHA256

      484c8ff25014b303114502ae99d8bbafb881666717488815bb4bde876ae191c4

    • SHA512

      5f54f980cb8b09df9575b08f124621f503a7db33cd4c5bc5003d185d3033e60ad703d882e5941dab95fe4d86a81eea099df4b1d885ffb5bef363793a56f2b99d

    • SSDEEP

      3072:AUApueDWSppTaeskDEjUrqfkZ557YzAL9gFoI3X3fZE5UANax:ASeyGpTaesaQUufkL57YsL9NIx9ANax

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks