General

  • Target

    11bba91dfbe9291e380a9316f12cd2b696a9a1ada8da9d2aa0090a2425d118b4.exe

  • Size

    335KB

  • Sample

    241206-kbh9paykhs

  • MD5

    cf747d9922dedadfabbff197a7bac2ee

  • SHA1

    13415f88d5302eef54c966a0096dea92a9b83c17

  • SHA256

    11bba91dfbe9291e380a9316f12cd2b696a9a1ada8da9d2aa0090a2425d118b4

  • SHA512

    d7e2d7f9d7d0fede4f2b4e3bfd4697c573e854615bd19d4550ad20919fe40b0e7e767023f9c3efb9b96da9e76542cf5699d3c4f9fd9c0e18ee59498678f8b293

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVV0:vHW138/iXWlK885rKlGSekcj66ciEV0

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      11bba91dfbe9291e380a9316f12cd2b696a9a1ada8da9d2aa0090a2425d118b4.exe

    • Size

      335KB

    • MD5

      cf747d9922dedadfabbff197a7bac2ee

    • SHA1

      13415f88d5302eef54c966a0096dea92a9b83c17

    • SHA256

      11bba91dfbe9291e380a9316f12cd2b696a9a1ada8da9d2aa0090a2425d118b4

    • SHA512

      d7e2d7f9d7d0fede4f2b4e3bfd4697c573e854615bd19d4550ad20919fe40b0e7e767023f9c3efb9b96da9e76542cf5699d3c4f9fd9c0e18ee59498678f8b293

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVV0:vHW138/iXWlK885rKlGSekcj66ciEV0

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks