General

  • Target

    d76022b8cfb7ff7756ec20f02a9b102a8e109d5916da75a852cee2327bfcd73bN.exe

  • Size

    66KB

  • Sample

    241207-f1ekkstnek

  • MD5

    525957cb9394b8019da37cb5237ea960

  • SHA1

    d8fdb97bef17159b94696c818b486a4eaae9383d

  • SHA256

    d76022b8cfb7ff7756ec20f02a9b102a8e109d5916da75a852cee2327bfcd73b

  • SHA512

    5860f49f5a7870ba4f119042cd974ca18e39ba0a0cacf53b206b0e7d730ac3a8bf379f5fa33044f8904d52a1b1cc71a2ff25f70a4324a0445c4922c55365ed88

  • SSDEEP

    1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTmUD0l:6bQRSHpAvzyf7MzeThD0l

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      d76022b8cfb7ff7756ec20f02a9b102a8e109d5916da75a852cee2327bfcd73bN.exe

    • Size

      66KB

    • MD5

      525957cb9394b8019da37cb5237ea960

    • SHA1

      d8fdb97bef17159b94696c818b486a4eaae9383d

    • SHA256

      d76022b8cfb7ff7756ec20f02a9b102a8e109d5916da75a852cee2327bfcd73b

    • SHA512

      5860f49f5a7870ba4f119042cd974ca18e39ba0a0cacf53b206b0e7d730ac3a8bf379f5fa33044f8904d52a1b1cc71a2ff25f70a4324a0445c4922c55365ed88

    • SSDEEP

      1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTmUD0l:6bQRSHpAvzyf7MzeThD0l

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks