General

  • Target

    744c7dca2af0f3454c52b669750f9411ec1dc3cf6692afe45276f4d720c452abN.exe

  • Size

    57KB

  • Sample

    241207-3y8f7s1lgv

  • MD5

    0101aa591c2e0158864b6dfde334cb50

  • SHA1

    45167c228ad1264d5aab3f4f4a58f05503f503fd

  • SHA256

    744c7dca2af0f3454c52b669750f9411ec1dc3cf6692afe45276f4d720c452ab

  • SHA512

    30a91cfca1228995ab89b2ba51e8faf8978e6b63fe39f067149fe2c752081eb502f97630b3211a96d972cea0fa5e1c01b9f5408da99dc9a8467702d0e4b1dae8

  • SSDEEP

    1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8o:MOemdTd1o74qlmbbJ+x+Ik+

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      744c7dca2af0f3454c52b669750f9411ec1dc3cf6692afe45276f4d720c452abN.exe

    • Size

      57KB

    • MD5

      0101aa591c2e0158864b6dfde334cb50

    • SHA1

      45167c228ad1264d5aab3f4f4a58f05503f503fd

    • SHA256

      744c7dca2af0f3454c52b669750f9411ec1dc3cf6692afe45276f4d720c452ab

    • SHA512

      30a91cfca1228995ab89b2ba51e8faf8978e6b63fe39f067149fe2c752081eb502f97630b3211a96d972cea0fa5e1c01b9f5408da99dc9a8467702d0e4b1dae8

    • SSDEEP

      1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8o:MOemdTd1o74qlmbbJ+x+Ik+

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks