General

  • Target

    707a539c64d23c9cf836e8c92742b5d4f32895c906cad28966e78d1ed011f25c.exe

  • Size

    448KB

  • Sample

    241124-gf77tssqcq

  • MD5

    7b19391fe95e7ca39f825f9a97524f99

  • SHA1

    c2a97e3c170d4860dbe274f387382e566763652b

  • SHA256

    707a539c64d23c9cf836e8c92742b5d4f32895c906cad28966e78d1ed011f25c

  • SHA512

    1f812cf3f6740ff8b2bc04553c55749c0ac2a0ff61cccca4d48cc995abeac64286d945386c10fe82bea2745898ac9c1ce3581841ff016eb19a117c0d2d2c3856

  • SSDEEP

    6144:PEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpoZ8:PMpASIcWYx2U6hAJQn6

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      707a539c64d23c9cf836e8c92742b5d4f32895c906cad28966e78d1ed011f25c.exe

    • Size

      448KB

    • MD5

      7b19391fe95e7ca39f825f9a97524f99

    • SHA1

      c2a97e3c170d4860dbe274f387382e566763652b

    • SHA256

      707a539c64d23c9cf836e8c92742b5d4f32895c906cad28966e78d1ed011f25c

    • SHA512

      1f812cf3f6740ff8b2bc04553c55749c0ac2a0ff61cccca4d48cc995abeac64286d945386c10fe82bea2745898ac9c1ce3581841ff016eb19a117c0d2d2c3856

    • SSDEEP

      6144:PEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpoZ8:PMpASIcWYx2U6hAJQn6

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks