General

  • Target

    643551061bb861652f3ed1c650483526cd40985c09440becd403eb42444b75b1N.exe

  • Size

    275KB

  • Sample

    241206-f8hl7ssmfv

  • MD5

    4f484ec903da6d4e4fca1f56b3a0f5e0

  • SHA1

    053c14798282218e84fadacb5b7c06129cc73b38

  • SHA256

    643551061bb861652f3ed1c650483526cd40985c09440becd403eb42444b75b1

  • SHA512

    eecafc7fd8acf4f08459150a9e8d1a2a32b6a7e9fc7205c57807209784b6c4a1d967aee842031c8547aaeb4ad50f758f8cf2bc7166ccda2cef835a2d6f4017c8

  • SSDEEP

    6144:YBJz8I3EKuteh0AemMzbUNnWNt+xXEUPW:6B8I0vtHLPUNWv+xXDW

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.165

218.54.31.226

Targets

    • Target

      643551061bb861652f3ed1c650483526cd40985c09440becd403eb42444b75b1N.exe

    • Size

      275KB

    • MD5

      4f484ec903da6d4e4fca1f56b3a0f5e0

    • SHA1

      053c14798282218e84fadacb5b7c06129cc73b38

    • SHA256

      643551061bb861652f3ed1c650483526cd40985c09440becd403eb42444b75b1

    • SHA512

      eecafc7fd8acf4f08459150a9e8d1a2a32b6a7e9fc7205c57807209784b6c4a1d967aee842031c8547aaeb4ad50f758f8cf2bc7166ccda2cef835a2d6f4017c8

    • SSDEEP

      6144:YBJz8I3EKuteh0AemMzbUNnWNt+xXEUPW:6B8I0vtHLPUNWv+xXDW

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks