General

  • Target

    e13bbea0f6b12c7baedc708229b8df8c9361bd565d575b2938ee74deba682d73.exe

  • Size

    57KB

  • Sample

    241206-jpqegsxlaz

  • MD5

    72179f122496e29cc8f5514c642c0c33

  • SHA1

    0f1ba2c655c8609362cccd90c0a87891679d54cb

  • SHA256

    e13bbea0f6b12c7baedc708229b8df8c9361bd565d575b2938ee74deba682d73

  • SHA512

    a3ed5af3a57663f15d9e1b697753a9de1f36548ab9edeeb49db274af130d87530927f41c6286a2f6c1d87e56acee64df1d075a4e30dcfc01d3dea7cfb7afcc5f

  • SSDEEP

    1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8G:MOemdTd1o74qlmbbJ+x+IkA

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      e13bbea0f6b12c7baedc708229b8df8c9361bd565d575b2938ee74deba682d73.exe

    • Size

      57KB

    • MD5

      72179f122496e29cc8f5514c642c0c33

    • SHA1

      0f1ba2c655c8609362cccd90c0a87891679d54cb

    • SHA256

      e13bbea0f6b12c7baedc708229b8df8c9361bd565d575b2938ee74deba682d73

    • SHA512

      a3ed5af3a57663f15d9e1b697753a9de1f36548ab9edeeb49db274af130d87530927f41c6286a2f6c1d87e56acee64df1d075a4e30dcfc01d3dea7cfb7afcc5f

    • SSDEEP

      1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8G:MOemdTd1o74qlmbbJ+x+IkA

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks