General

  • Target

    071e94542186d4512758ff79e49b0ad7d6c2a0f6d0a9a9bcd8c8eb7ded21fb3cN.exe

  • Size

    66KB

  • Sample

    241125-m7sjcaznfn

  • MD5

    4a2c1da189ad6073e0a4f0815b1c04d0

  • SHA1

    44afbeb90d3347544fcce54013d2640630283130

  • SHA256

    071e94542186d4512758ff79e49b0ad7d6c2a0f6d0a9a9bcd8c8eb7ded21fb3c

  • SHA512

    f87f2c8830db62d47387025cd56a89262e9d2ff5005617e74a6e897dc9fae062214ac5d19d7f83503992e3e92947dd013034601d6ca23e9b9ebdfddbf0b5ace5

  • SSDEEP

    1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTmUD0l:6bQRSHpAvzyf7MzeThD0l

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      071e94542186d4512758ff79e49b0ad7d6c2a0f6d0a9a9bcd8c8eb7ded21fb3cN.exe

    • Size

      66KB

    • MD5

      4a2c1da189ad6073e0a4f0815b1c04d0

    • SHA1

      44afbeb90d3347544fcce54013d2640630283130

    • SHA256

      071e94542186d4512758ff79e49b0ad7d6c2a0f6d0a9a9bcd8c8eb7ded21fb3c

    • SHA512

      f87f2c8830db62d47387025cd56a89262e9d2ff5005617e74a6e897dc9fae062214ac5d19d7f83503992e3e92947dd013034601d6ca23e9b9ebdfddbf0b5ace5

    • SSDEEP

      1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTmUD0l:6bQRSHpAvzyf7MzeThD0l

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks