General

  • Target

    567756a0d8796c02b9c7e9efbf2c23a32e8a6a669968c16a869c9869ee9695e1.exe

  • Size

    66KB

  • Sample

    241206-mwm5gstmds

  • MD5

    529f11466b4c7d9513bb876bc177ff8d

  • SHA1

    b37caf70335e7267bfd948a3c00b8136b1cf64ba

  • SHA256

    567756a0d8796c02b9c7e9efbf2c23a32e8a6a669968c16a869c9869ee9695e1

  • SHA512

    315fa071077cdb07664873bbf83de45dce63e546217fe7d553553adf2cab2a10b7ef001ddd70f38b7a6b91bb67f0d22ef457613b8f2c01dc02008c54f8ab5e96

  • SSDEEP

    1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTmUD0j:6bQRSHpAvzyf7MzeThD0j

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      567756a0d8796c02b9c7e9efbf2c23a32e8a6a669968c16a869c9869ee9695e1.exe

    • Size

      66KB

    • MD5

      529f11466b4c7d9513bb876bc177ff8d

    • SHA1

      b37caf70335e7267bfd948a3c00b8136b1cf64ba

    • SHA256

      567756a0d8796c02b9c7e9efbf2c23a32e8a6a669968c16a869c9869ee9695e1

    • SHA512

      315fa071077cdb07664873bbf83de45dce63e546217fe7d553553adf2cab2a10b7ef001ddd70f38b7a6b91bb67f0d22ef457613b8f2c01dc02008c54f8ab5e96

    • SSDEEP

      1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTmUD0j:6bQRSHpAvzyf7MzeThD0j

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks