General

  • Target

    e707661b8e8146ab18fb1511dda924814a82853140ae06e80dc4989d81a81935N.exe

  • Size

    332KB

  • Sample

    241124-f5zfjswmgt

  • MD5

    fae2c1c193adec9417f65fb5a9f230e0

  • SHA1

    1c62a6e0e5473c2889373e4339a0e9136e68e6f8

  • SHA256

    e707661b8e8146ab18fb1511dda924814a82853140ae06e80dc4989d81a81935

  • SHA512

    f6bdaf623369fb53c6b273d52278b91c6c54d86a87df4a17f04ef8cb88dc9a8cade46105a090871d10507cf986567316572f1bbcdf84776eebeb213ec075d52d

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYX:vHW138/iXWlK885rKlGSekcj66ciy

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      e707661b8e8146ab18fb1511dda924814a82853140ae06e80dc4989d81a81935N.exe

    • Size

      332KB

    • MD5

      fae2c1c193adec9417f65fb5a9f230e0

    • SHA1

      1c62a6e0e5473c2889373e4339a0e9136e68e6f8

    • SHA256

      e707661b8e8146ab18fb1511dda924814a82853140ae06e80dc4989d81a81935

    • SHA512

      f6bdaf623369fb53c6b273d52278b91c6c54d86a87df4a17f04ef8cb88dc9a8cade46105a090871d10507cf986567316572f1bbcdf84776eebeb213ec075d52d

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYX:vHW138/iXWlK885rKlGSekcj66ciy

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks