General

  • Target

    9b4b13dbca371f99fe0defc8d6c2370d7513d923061385636b2f344d0e6e07d3N.exe

  • Size

    510KB

  • Sample

    241205-zqd1va1pht

  • MD5

    b639bc0a212aee9bc09ae316daff5210

  • SHA1

    240e3ec4bc4255de9a585442aebf034a6df69c4c

  • SHA256

    9b4b13dbca371f99fe0defc8d6c2370d7513d923061385636b2f344d0e6e07d3

  • SHA512

    36f549f9e1a4deb187cbd7e2bab8c16cb31078e2d5a503f8949abf077f4389ce96198d3fbdead95632e5c284c6269625fb2bba87bcaf96f6c1641ff61485ad07

  • SSDEEP

    12288:3o7CGWcQSyYI2VrFKH5RBv9AQ1pEDdKou:3MUv2LAv9AQ1p4dKb

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      9b4b13dbca371f99fe0defc8d6c2370d7513d923061385636b2f344d0e6e07d3N.exe

    • Size

      510KB

    • MD5

      b639bc0a212aee9bc09ae316daff5210

    • SHA1

      240e3ec4bc4255de9a585442aebf034a6df69c4c

    • SHA256

      9b4b13dbca371f99fe0defc8d6c2370d7513d923061385636b2f344d0e6e07d3

    • SHA512

      36f549f9e1a4deb187cbd7e2bab8c16cb31078e2d5a503f8949abf077f4389ce96198d3fbdead95632e5c284c6269625fb2bba87bcaf96f6c1641ff61485ad07

    • SSDEEP

      12288:3o7CGWcQSyYI2VrFKH5RBv9AQ1pEDdKou:3MUv2LAv9AQ1p4dKb

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks