General

  • Target

    419ee4c3985eb7c218985ea45f130bd6c8a7193ec0885f107cd2ccfe060365de.exe

  • Size

    141KB

  • Sample

    241207-acvzrs1lgr

  • MD5

    c305d4ae239732b32d3abb574dbdc908

  • SHA1

    d7b01f5963df1f64d9ab497ab26da9ceced170dd

  • SHA256

    419ee4c3985eb7c218985ea45f130bd6c8a7193ec0885f107cd2ccfe060365de

  • SHA512

    4e529416c2a417725dfaa99410027685ddf22f02d319dc6b1da960eb130e3fa79c118a3e85b18d5ac319c1116b5dadc8de79d244683a6067b1d6171a862d2a35

  • SSDEEP

    1536:P/oEkqfCZ10zcT9Yh8AIXcjyz9cOXfiXGImcatMrsWjcdf6odgR5APfIQ:P/5kqCxiXEcO3XfGf2tMUf6odgR5A4Q

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      419ee4c3985eb7c218985ea45f130bd6c8a7193ec0885f107cd2ccfe060365de.exe

    • Size

      141KB

    • MD5

      c305d4ae239732b32d3abb574dbdc908

    • SHA1

      d7b01f5963df1f64d9ab497ab26da9ceced170dd

    • SHA256

      419ee4c3985eb7c218985ea45f130bd6c8a7193ec0885f107cd2ccfe060365de

    • SHA512

      4e529416c2a417725dfaa99410027685ddf22f02d319dc6b1da960eb130e3fa79c118a3e85b18d5ac319c1116b5dadc8de79d244683a6067b1d6171a862d2a35

    • SSDEEP

      1536:P/oEkqfCZ10zcT9Yh8AIXcjyz9cOXfiXGImcatMrsWjcdf6odgR5APfIQ:P/5kqCxiXEcO3XfGf2tMUf6odgR5A4Q

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks