General

  • Target

    265c6afff3656865309d98fc9193994a51fecf9d175135aed711dedc4dcf1ca5N.exe

  • Size

    68KB

  • Sample

    241124-sdkjjavlh1

  • MD5

    78e86155841e49c1de9f7e35a10c19d0

  • SHA1

    797c7e633949b54ee0f2b5f6c68a821cb28a76d0

  • SHA256

    265c6afff3656865309d98fc9193994a51fecf9d175135aed711dedc4dcf1ca5

  • SHA512

    86b39651c0988563d657ac6c5bb315b2684acb47996a13281b28e46c715f5d07eb7e144556deab074c482bec9625479fcc0b17aa63587e87a75f9cdd3a243756

  • SSDEEP

    1536:04/WgLAjdZsp+uChoLnDeoqYAJjvLFymnHsPeOrG:l//AjMp+u2onejH2PeEG

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      265c6afff3656865309d98fc9193994a51fecf9d175135aed711dedc4dcf1ca5N.exe

    • Size

      68KB

    • MD5

      78e86155841e49c1de9f7e35a10c19d0

    • SHA1

      797c7e633949b54ee0f2b5f6c68a821cb28a76d0

    • SHA256

      265c6afff3656865309d98fc9193994a51fecf9d175135aed711dedc4dcf1ca5

    • SHA512

      86b39651c0988563d657ac6c5bb315b2684acb47996a13281b28e46c715f5d07eb7e144556deab074c482bec9625479fcc0b17aa63587e87a75f9cdd3a243756

    • SSDEEP

      1536:04/WgLAjdZsp+uChoLnDeoqYAJjvLFymnHsPeOrG:l//AjMp+u2onejH2PeEG

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks