General

  • Target

    0e9b77ed79254116378600a4230410912ae913f7265890881554795c398ad807N.exe

  • Size

    335KB

  • Sample

    241206-vc1kgasrbm

  • MD5

    8cb4de3ec7aa600f32bda077dfa76d70

  • SHA1

    a85ae20ee43c62b6db8c32c7409fbb424e5842d6

  • SHA256

    0e9b77ed79254116378600a4230410912ae913f7265890881554795c398ad807

  • SHA512

    f111e57b24edbe8a93dacb9cc2fae513561b955895517730213d231cc7690817af0d069ded2a5aead25e5d7ab4a041ef20d7a2e31034632cad1350ab848cd6ef

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYC:vHW138/iXWlK885rKlGSekcj66cib

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      0e9b77ed79254116378600a4230410912ae913f7265890881554795c398ad807N.exe

    • Size

      335KB

    • MD5

      8cb4de3ec7aa600f32bda077dfa76d70

    • SHA1

      a85ae20ee43c62b6db8c32c7409fbb424e5842d6

    • SHA256

      0e9b77ed79254116378600a4230410912ae913f7265890881554795c398ad807

    • SHA512

      f111e57b24edbe8a93dacb9cc2fae513561b955895517730213d231cc7690817af0d069ded2a5aead25e5d7ab4a041ef20d7a2e31034632cad1350ab848cd6ef

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYC:vHW138/iXWlK885rKlGSekcj66cib

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks