General

  • Target

    3446560be933db07885e01658cad196df816cde7c8537097de5bb36fdf583d38.exe

  • Size

    441KB

  • Sample

    241124-ef6b5aspgz

  • MD5

    f86dcb4311922e5e86616c5304ba2d19

  • SHA1

    90a2443c818be2c5d347b74e41eda53011386b45

  • SHA256

    3446560be933db07885e01658cad196df816cde7c8537097de5bb36fdf583d38

  • SHA512

    874524ea9560d72754092debb60c1962d717f4ca2a986713a40f32e6d99448e19200de54b32bad4034e4522c9ed4ed7cb52f13ae33eb4d186be1fcfa721165c3

  • SSDEEP

    6144:oo3wBi+1Py3V0a2WkRNgi3caOHO5NjEwwiYWB5mV4Pzw9ygibGGM/:rKf1PyKa2H3hOHOHz9JQ6zBO

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.165

218.54.31.226

Targets

    • Target

      3446560be933db07885e01658cad196df816cde7c8537097de5bb36fdf583d38.exe

    • Size

      441KB

    • MD5

      f86dcb4311922e5e86616c5304ba2d19

    • SHA1

      90a2443c818be2c5d347b74e41eda53011386b45

    • SHA256

      3446560be933db07885e01658cad196df816cde7c8537097de5bb36fdf583d38

    • SHA512

      874524ea9560d72754092debb60c1962d717f4ca2a986713a40f32e6d99448e19200de54b32bad4034e4522c9ed4ed7cb52f13ae33eb4d186be1fcfa721165c3

    • SSDEEP

      6144:oo3wBi+1Py3V0a2WkRNgi3caOHO5NjEwwiYWB5mV4Pzw9ygibGGM/:rKf1PyKa2H3hOHOHz9JQ6zBO

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks