General

  • Target

    f10929b3881e1d766d1b834debecd51cb74b3e362f7dac0ce4368f137ed7e0c4.exe

  • Size

    60KB

  • Sample

    241124-a2bmes1ndj

  • MD5

    56c634314b0075f8a279f1e5d1288548

  • SHA1

    e5c70985f7e3d3dd0a6b5fe2cae786c6b88b2b09

  • SHA256

    f10929b3881e1d766d1b834debecd51cb74b3e362f7dac0ce4368f137ed7e0c4

  • SHA512

    45e72e435cfd3db2e85a14868dee11a58f21fe4c8707227376fed06a3c5c3bf59da6430e96290970eb03ff5a7299a95646301eef389c4140e20648202df12180

  • SSDEEP

    768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxP7:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdr6

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      f10929b3881e1d766d1b834debecd51cb74b3e362f7dac0ce4368f137ed7e0c4.exe

    • Size

      60KB

    • MD5

      56c634314b0075f8a279f1e5d1288548

    • SHA1

      e5c70985f7e3d3dd0a6b5fe2cae786c6b88b2b09

    • SHA256

      f10929b3881e1d766d1b834debecd51cb74b3e362f7dac0ce4368f137ed7e0c4

    • SHA512

      45e72e435cfd3db2e85a14868dee11a58f21fe4c8707227376fed06a3c5c3bf59da6430e96290970eb03ff5a7299a95646301eef389c4140e20648202df12180

    • SSDEEP

      768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxP7:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdr6

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks