General

  • Target

    7336773cda35ca7da53e9ce3454d2f5094fe7d20e79397c338814106b94b6d7d.exe

  • Size

    338KB

  • Sample

    241206-xg13xaxmhj

  • MD5

    3e4c16d9130d98dfcf7ca845d4c34b80

  • SHA1

    c72fca9756823d85ec81ca9856cce7604a49e0e7

  • SHA256

    7336773cda35ca7da53e9ce3454d2f5094fe7d20e79397c338814106b94b6d7d

  • SHA512

    9788b0f06265a0f19e66fc4ed97559b861534b3896cfd7bb78ac6b4f4707894a4ec76963970331bfeb37b95e1281c5492689906e0bfe1cb581c459530dfae5ef

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYWE:vHW138/iXWlK885rKlGSekcj66ciI

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      7336773cda35ca7da53e9ce3454d2f5094fe7d20e79397c338814106b94b6d7d.exe

    • Size

      338KB

    • MD5

      3e4c16d9130d98dfcf7ca845d4c34b80

    • SHA1

      c72fca9756823d85ec81ca9856cce7604a49e0e7

    • SHA256

      7336773cda35ca7da53e9ce3454d2f5094fe7d20e79397c338814106b94b6d7d

    • SHA512

      9788b0f06265a0f19e66fc4ed97559b861534b3896cfd7bb78ac6b4f4707894a4ec76963970331bfeb37b95e1281c5492689906e0bfe1cb581c459530dfae5ef

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYWE:vHW138/iXWlK885rKlGSekcj66ciI

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks