General

  • Target

    d9374c75d33b6b44e45a576fa01a39bc26cf3aaf71ae39781cab1f437a41f103.exe

  • Size

    60KB

  • Sample

    241123-y8c1tsvld1

  • MD5

    3d1d7d767216e01ece5829add86d3f8e

  • SHA1

    d77516e5a07292e8657b1fe400e798e860828b5c

  • SHA256

    d9374c75d33b6b44e45a576fa01a39bc26cf3aaf71ae39781cab1f437a41f103

  • SHA512

    e0cd8a1a19963ff70001e450d99f8bfff3f3477a5a032ad9b33e3e0c71d62a0d6248e21d32c396c102a2cc99981d2588a2059df3a6973db05c02d15c6ab2fe6f

  • SSDEEP

    768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPh:nK0GjMeQG3iaQREuVZ6ro29p4YxbKd98

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      d9374c75d33b6b44e45a576fa01a39bc26cf3aaf71ae39781cab1f437a41f103.exe

    • Size

      60KB

    • MD5

      3d1d7d767216e01ece5829add86d3f8e

    • SHA1

      d77516e5a07292e8657b1fe400e798e860828b5c

    • SHA256

      d9374c75d33b6b44e45a576fa01a39bc26cf3aaf71ae39781cab1f437a41f103

    • SHA512

      e0cd8a1a19963ff70001e450d99f8bfff3f3477a5a032ad9b33e3e0c71d62a0d6248e21d32c396c102a2cc99981d2588a2059df3a6973db05c02d15c6ab2fe6f

    • SSDEEP

      768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPh:nK0GjMeQG3iaQREuVZ6ro29p4YxbKd98

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks