General

  • Target

    2b7c179266b8f5b648eace2f808a28e1ad7b2fec92113daaa49518d3d27870daN.exe

  • Size

    75KB

  • Sample

    241205-rcxl2axnfs

  • MD5

    cd32ae4b366337014b1272d4555117a0

  • SHA1

    7ea4b34ec103835f9005566a84646458e635894b

  • SHA256

    2b7c179266b8f5b648eace2f808a28e1ad7b2fec92113daaa49518d3d27870da

  • SHA512

    75e818488240d6e3fe980afaf1933e203fa0c5a9fa18ff9f111cd5b6a238c87f6b3718a7b305bc2382e338f0465309ef8e89d2e2453c7df434625ad0702ea819

  • SSDEEP

    1536:+Uk8RgDXz7Kx8zzgmTlvtKrNCpbXmsz4tHITo:Tk8yn7KdmTINQXzz4V

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      2b7c179266b8f5b648eace2f808a28e1ad7b2fec92113daaa49518d3d27870daN.exe

    • Size

      75KB

    • MD5

      cd32ae4b366337014b1272d4555117a0

    • SHA1

      7ea4b34ec103835f9005566a84646458e635894b

    • SHA256

      2b7c179266b8f5b648eace2f808a28e1ad7b2fec92113daaa49518d3d27870da

    • SHA512

      75e818488240d6e3fe980afaf1933e203fa0c5a9fa18ff9f111cd5b6a238c87f6b3718a7b305bc2382e338f0465309ef8e89d2e2453c7df434625ad0702ea819

    • SSDEEP

      1536:+Uk8RgDXz7Kx8zzgmTlvtKrNCpbXmsz4tHITo:Tk8yn7KdmTINQXzz4V

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks