General

  • Target

    03fa6261e2ee4f47376aec0875cadf16e774b02382f48e9f1f2cfd32352d0484.exe

  • Size

    4.7MB

  • Sample

    241124-b6h3qsxpbv

  • MD5

    b6a55c30a06c0e8bb0da2b66025873c4

  • SHA1

    fe402ca6591834996728a7690c3a15b23333d8a9

  • SHA256

    03fa6261e2ee4f47376aec0875cadf16e774b02382f48e9f1f2cfd32352d0484

  • SHA512

    aabfe35696ae6c4ddbd6e5255ed3adb0c6d58825c4490679e779ab117a1e336bbb31576a215d1954a39672b585230d9adc310f05587450cf5cf94060ba602925

  • SSDEEP

    49152:a2V7djp+oE2ZjHoZB6EZ88JUUXIEABMRviTURcz:a2V7NpW6Y6joU3

Score
10/10

Malware Config

Extracted

Family

urelas

C2

121.88.5.183

218.54.30.235

121.88.5.181

112.223.217.101

Targets

    • Target

      03fa6261e2ee4f47376aec0875cadf16e774b02382f48e9f1f2cfd32352d0484.exe

    • Size

      4.7MB

    • MD5

      b6a55c30a06c0e8bb0da2b66025873c4

    • SHA1

      fe402ca6591834996728a7690c3a15b23333d8a9

    • SHA256

      03fa6261e2ee4f47376aec0875cadf16e774b02382f48e9f1f2cfd32352d0484

    • SHA512

      aabfe35696ae6c4ddbd6e5255ed3adb0c6d58825c4490679e779ab117a1e336bbb31576a215d1954a39672b585230d9adc310f05587450cf5cf94060ba602925

    • SSDEEP

      49152:a2V7djp+oE2ZjHoZB6EZ88JUUXIEABMRviTURcz:a2V7NpW6Y6joU3

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks