General

  • Target

    98878d315c1664a568f34e3a1fe96eaa0b5f14e46466e7474cf97be666d242ddN.exe

  • Size

    76KB

  • Sample

    241206-gy6rqazmap

  • MD5

    189f93a96da4bc7d1a2f07f4d3a3e080

  • SHA1

    405f770844d637aff4dd0cc666172cef333c4a86

  • SHA256

    98878d315c1664a568f34e3a1fe96eaa0b5f14e46466e7474cf97be666d242dd

  • SHA512

    9207bf6ccda6192f12b49be828ac8c0e1c9fb07c205d5827542d5e59d0e728d6c4175f5b1c0d46ecd6206316c86dfec5a9f302417905bbe7f29cde5587b38446

  • SSDEEP

    1536:1D433Oe20lleqbmruXP+9E5KJ+e8Xwhpft:1Dcpl1mrE+EeBJfV

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.208

112.175.88.207

Targets

    • Target

      98878d315c1664a568f34e3a1fe96eaa0b5f14e46466e7474cf97be666d242ddN.exe

    • Size

      76KB

    • MD5

      189f93a96da4bc7d1a2f07f4d3a3e080

    • SHA1

      405f770844d637aff4dd0cc666172cef333c4a86

    • SHA256

      98878d315c1664a568f34e3a1fe96eaa0b5f14e46466e7474cf97be666d242dd

    • SHA512

      9207bf6ccda6192f12b49be828ac8c0e1c9fb07c205d5827542d5e59d0e728d6c4175f5b1c0d46ecd6206316c86dfec5a9f302417905bbe7f29cde5587b38446

    • SSDEEP

      1536:1D433Oe20lleqbmruXP+9E5KJ+e8Xwhpft:1Dcpl1mrE+EeBJfV

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks