General

  • Target

    e350b0c0ecd551ae9874ab5ad3d9453e334e7ff9f5c1d5ac6b7691cdf49846a6.exe

  • Size

    57KB

  • Sample

    241204-2d1p7azqcr

  • MD5

    cf2a4f2bb279bfa058c9959eef7ca996

  • SHA1

    1145a2db59d3060bf39dbd84e12df8b8598d719e

  • SHA256

    e350b0c0ecd551ae9874ab5ad3d9453e334e7ff9f5c1d5ac6b7691cdf49846a6

  • SHA512

    4ea339c36ac8a2187f75fac6452cc2e9d78d8870bc3ffa49d23880c387144c3470478dd03d777beb22c5e10c1e678c3d8bb650841d9db3f4445f13a5437091d2

  • SSDEEP

    1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8R:MOemdTd1o74qlmbbJ+x+Ik3

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      e350b0c0ecd551ae9874ab5ad3d9453e334e7ff9f5c1d5ac6b7691cdf49846a6.exe

    • Size

      57KB

    • MD5

      cf2a4f2bb279bfa058c9959eef7ca996

    • SHA1

      1145a2db59d3060bf39dbd84e12df8b8598d719e

    • SHA256

      e350b0c0ecd551ae9874ab5ad3d9453e334e7ff9f5c1d5ac6b7691cdf49846a6

    • SHA512

      4ea339c36ac8a2187f75fac6452cc2e9d78d8870bc3ffa49d23880c387144c3470478dd03d777beb22c5e10c1e678c3d8bb650841d9db3f4445f13a5437091d2

    • SSDEEP

      1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8R:MOemdTd1o74qlmbbJ+x+Ik3

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks