General

  • Target

    528a01c489ede33b80523126e4d4a885ae495cd290a8eceb3821faf0982e942c.exe

  • Size

    93KB

  • Sample

    241206-e1rz8szncv

  • MD5

    1a0600b707b4259f0e20a55ef1ef5175

  • SHA1

    7df8c2784b1d221848419b7fefdc461207fc5aa3

  • SHA256

    528a01c489ede33b80523126e4d4a885ae495cd290a8eceb3821faf0982e942c

  • SHA512

    da6579af3ddf1f72582206c98f5204d8531fb0a57e6a87cc00b76082ff8c22b993ff250601da2956349f6fb39ff1f25acd54d271842d998100052f43ff880d45

  • SSDEEP

    768:tp0ti4HnnhtwYbJy6rioyelmd1TzulQEDDPOwc5n5uNCT/jhhLBxQIwqepJZU9m+:tWzhtJbUgHoADDIx1hLfuJr+

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      528a01c489ede33b80523126e4d4a885ae495cd290a8eceb3821faf0982e942c.exe

    • Size

      93KB

    • MD5

      1a0600b707b4259f0e20a55ef1ef5175

    • SHA1

      7df8c2784b1d221848419b7fefdc461207fc5aa3

    • SHA256

      528a01c489ede33b80523126e4d4a885ae495cd290a8eceb3821faf0982e942c

    • SHA512

      da6579af3ddf1f72582206c98f5204d8531fb0a57e6a87cc00b76082ff8c22b993ff250601da2956349f6fb39ff1f25acd54d271842d998100052f43ff880d45

    • SSDEEP

      768:tp0ti4HnnhtwYbJy6rioyelmd1TzulQEDDPOwc5n5uNCT/jhhLBxQIwqepJZU9m+:tWzhtJbUgHoADDIx1hLfuJr+

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks