General

  • Target

    40044b6a74c6878ea917eb7fb60f90a6c0d712e89a44b5597070b428e2c1620c.exe

  • Size

    337KB

  • Sample

    241206-c366tswkhx

  • MD5

    53ac000b628536d3b532efbd2d8846b4

  • SHA1

    091906986ad4bad87d885985e9b94b8df39dbf1e

  • SHA256

    40044b6a74c6878ea917eb7fb60f90a6c0d712e89a44b5597070b428e2c1620c

  • SHA512

    56f18871a2d08423b1ab48f062327633c04a0bb20489adc38efda0cfe2d10d551b5fb127968534eb17d3e02c51b155afa7a77108832b3a54ad2da3b6b56cd281

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYl:vHW138/iXWlK885rKlGSekcj66ciU

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      40044b6a74c6878ea917eb7fb60f90a6c0d712e89a44b5597070b428e2c1620c.exe

    • Size

      337KB

    • MD5

      53ac000b628536d3b532efbd2d8846b4

    • SHA1

      091906986ad4bad87d885985e9b94b8df39dbf1e

    • SHA256

      40044b6a74c6878ea917eb7fb60f90a6c0d712e89a44b5597070b428e2c1620c

    • SHA512

      56f18871a2d08423b1ab48f062327633c04a0bb20489adc38efda0cfe2d10d551b5fb127968534eb17d3e02c51b155afa7a77108832b3a54ad2da3b6b56cd281

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYl:vHW138/iXWlK885rKlGSekcj66ciU

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks