General

  • Target

    67bad1b645cca94a24371b4ec215cc9b7efbf1fbacb15a2fb55e7cf3a700eb7d.exe

  • Size

    241KB

  • Sample

    241124-dpfx6a1mft

  • MD5

    4fd4bb6010719e935c05f5563902cbc4

  • SHA1

    8245d6a0739b829f9bdee94e8e28d511d7419b0b

  • SHA256

    67bad1b645cca94a24371b4ec215cc9b7efbf1fbacb15a2fb55e7cf3a700eb7d

  • SHA512

    6562e8905e78c0ad959716b2699d1c00efd109f55c1567d57a4dfe89d00a09dcab4340903419a4ce2e398835e2927672fcd5f233c48494409439f459ea9d98a9

  • SSDEEP

    3072:K8ASpvo0LKrXEX65ezpxJ2kbJ7mv73E2o/9sY2n:ZASpvo0LKkRzpxJ2kRqroin

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      67bad1b645cca94a24371b4ec215cc9b7efbf1fbacb15a2fb55e7cf3a700eb7d.exe

    • Size

      241KB

    • MD5

      4fd4bb6010719e935c05f5563902cbc4

    • SHA1

      8245d6a0739b829f9bdee94e8e28d511d7419b0b

    • SHA256

      67bad1b645cca94a24371b4ec215cc9b7efbf1fbacb15a2fb55e7cf3a700eb7d

    • SHA512

      6562e8905e78c0ad959716b2699d1c00efd109f55c1567d57a4dfe89d00a09dcab4340903419a4ce2e398835e2927672fcd5f233c48494409439f459ea9d98a9

    • SSDEEP

      3072:K8ASpvo0LKrXEX65ezpxJ2kbJ7mv73E2o/9sY2n:ZASpvo0LKkRzpxJ2kRqroin

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks