General

  • Target

    9513013f069dd2dd48324e6620ae14df540b7af34a56bc36b441423451b05af4.exe

  • Size

    348KB

  • Sample

    241123-y6agxs1lhq

  • MD5

    a89691f3add0a3fa328f60dacbb8e2aa

  • SHA1

    a3fcdd5e991e835f7956c6ef5b30bb9c7f59b8a1

  • SHA256

    9513013f069dd2dd48324e6620ae14df540b7af34a56bc36b441423451b05af4

  • SHA512

    409ad5f9e81d11f26b543611e327b1575589568bd6cebe568b3ff379f1361221a1e4a3925ecbe1ea51628d06d702309e6aa6c2182eb2100b340a8a1ef6e5e8fd

  • SSDEEP

    6144:8/bE5G5KiR0J0dCsnGb/6VOpLc91WlvhDSNZ5c:g0G5obGGraOpUWlpZ

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

Targets

    • Target

      9513013f069dd2dd48324e6620ae14df540b7af34a56bc36b441423451b05af4.exe

    • Size

      348KB

    • MD5

      a89691f3add0a3fa328f60dacbb8e2aa

    • SHA1

      a3fcdd5e991e835f7956c6ef5b30bb9c7f59b8a1

    • SHA256

      9513013f069dd2dd48324e6620ae14df540b7af34a56bc36b441423451b05af4

    • SHA512

      409ad5f9e81d11f26b543611e327b1575589568bd6cebe568b3ff379f1361221a1e4a3925ecbe1ea51628d06d702309e6aa6c2182eb2100b340a8a1ef6e5e8fd

    • SSDEEP

      6144:8/bE5G5KiR0J0dCsnGb/6VOpLc91WlvhDSNZ5c:g0G5obGGraOpUWlpZ

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks