General

  • Target

    fdc6c9e29a51b677a545312d15efc66907a69d56ba13ae06bcbfbe49cbca0a69N.exe

  • Size

    335KB

  • Sample

    241124-pbbbasvngl

  • MD5

    714315fad3e335b5c939b4a8e0b2fcd0

  • SHA1

    7bdfff1f79148b07533a1cb44297ca9f7b61baca

  • SHA256

    fdc6c9e29a51b677a545312d15efc66907a69d56ba13ae06bcbfbe49cbca0a69

  • SHA512

    70dbaa0e86243871e9872fdefa6d7d1b49777ebee96316812b40f9c53b0cb32278be6501a4f8729734c04e243ad726f08283f6ee59970dfdeee4307942eff86f

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIQ:vHW138/iXWlK885rKlGSekcj66ci8

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      fdc6c9e29a51b677a545312d15efc66907a69d56ba13ae06bcbfbe49cbca0a69N.exe

    • Size

      335KB

    • MD5

      714315fad3e335b5c939b4a8e0b2fcd0

    • SHA1

      7bdfff1f79148b07533a1cb44297ca9f7b61baca

    • SHA256

      fdc6c9e29a51b677a545312d15efc66907a69d56ba13ae06bcbfbe49cbca0a69

    • SHA512

      70dbaa0e86243871e9872fdefa6d7d1b49777ebee96316812b40f9c53b0cb32278be6501a4f8729734c04e243ad726f08283f6ee59970dfdeee4307942eff86f

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIQ:vHW138/iXWlK885rKlGSekcj66ci8

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks