General

  • Target

    462257c517ae085cd0df88b277fe797b79aa532c9985e899894a60bca40a596e.exe

  • Size

    60KB

  • Sample

    241124-jekfgswmhm

  • MD5

    cf0b6625f578dfc2398ee4314c2f1ef0

  • SHA1

    5adcba2d06e9bb9eb079a872f8551fe16c54af12

  • SHA256

    462257c517ae085cd0df88b277fe797b79aa532c9985e899894a60bca40a596e

  • SHA512

    d194cd9c78ce3c9918404c10bb9b7294f4577ce68667ed07c15ff85fc16d053ed665f3a01d1ec6db0f6bdc1e68d79b9eb523f33fda9d59da5952705c727a4736

  • SSDEEP

    768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPN:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdJA

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      462257c517ae085cd0df88b277fe797b79aa532c9985e899894a60bca40a596e.exe

    • Size

      60KB

    • MD5

      cf0b6625f578dfc2398ee4314c2f1ef0

    • SHA1

      5adcba2d06e9bb9eb079a872f8551fe16c54af12

    • SHA256

      462257c517ae085cd0df88b277fe797b79aa532c9985e899894a60bca40a596e

    • SHA512

      d194cd9c78ce3c9918404c10bb9b7294f4577ce68667ed07c15ff85fc16d053ed665f3a01d1ec6db0f6bdc1e68d79b9eb523f33fda9d59da5952705c727a4736

    • SSDEEP

      768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPN:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdJA

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks