General

  • Target

    ad8b452c8ba4ae695e8ffd18f460ab8204bffb082cbed03479c39b0affabc855N.exe

  • Size

    68KB

  • Sample

    241205-tx8k5sslg1

  • MD5

    facad75e1380f7fc64a615c1ebdd81b0

  • SHA1

    0f352ecd5f26961f4328671fcfbef6e657351ca1

  • SHA256

    ad8b452c8ba4ae695e8ffd18f460ab8204bffb082cbed03479c39b0affabc855

  • SHA512

    90456a3d891a22c844d6775a541890e4179a28008d9522f88b4443f5d3f282709fee557b465b0182f3d93e5e129f428816fa64d5c06c34d1bc613aa0e0c575db

  • SSDEEP

    1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCare9:yLAYUzmdD0sMQl7d7IuhCai9

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      ad8b452c8ba4ae695e8ffd18f460ab8204bffb082cbed03479c39b0affabc855N.exe

    • Size

      68KB

    • MD5

      facad75e1380f7fc64a615c1ebdd81b0

    • SHA1

      0f352ecd5f26961f4328671fcfbef6e657351ca1

    • SHA256

      ad8b452c8ba4ae695e8ffd18f460ab8204bffb082cbed03479c39b0affabc855

    • SHA512

      90456a3d891a22c844d6775a541890e4179a28008d9522f88b4443f5d3f282709fee557b465b0182f3d93e5e129f428816fa64d5c06c34d1bc613aa0e0c575db

    • SSDEEP

      1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCare9:yLAYUzmdD0sMQl7d7IuhCai9

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks