General

  • Target

    47dc53c76c65a8eb881f2f029335253af1c6838cf458ac90eafebfc30561be0f.exe

  • Size

    341KB

  • Sample

    241206-lp32pa1me1

  • MD5

    9e6a55c7bce3f2efc330ee91283aaac7

  • SHA1

    243ff31193d7d2f618dbe4816e1c6b9a1fbf66b1

  • SHA256

    47dc53c76c65a8eb881f2f029335253af1c6838cf458ac90eafebfc30561be0f

  • SHA512

    746aba37d81f1e00b91fadc38b7e8ea4738f3077ae3e030c611d958fcf90c0527bb6ee704e1881ba6510b1cf4ab8b71e70dcc990edbd6b68bd5e5700eab66fc2

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYpDyZ:vHW138/iXWlK885rKlGSekcj66ciEOZ

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      47dc53c76c65a8eb881f2f029335253af1c6838cf458ac90eafebfc30561be0f.exe

    • Size

      341KB

    • MD5

      9e6a55c7bce3f2efc330ee91283aaac7

    • SHA1

      243ff31193d7d2f618dbe4816e1c6b9a1fbf66b1

    • SHA256

      47dc53c76c65a8eb881f2f029335253af1c6838cf458ac90eafebfc30561be0f

    • SHA512

      746aba37d81f1e00b91fadc38b7e8ea4738f3077ae3e030c611d958fcf90c0527bb6ee704e1881ba6510b1cf4ab8b71e70dcc990edbd6b68bd5e5700eab66fc2

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYpDyZ:vHW138/iXWlK885rKlGSekcj66ciEOZ

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks