General

  • Target

    511e7048c26382693bc5949169e611c67e51687088fcd383453ca5586dc9f9edN.exe

  • Size

    508KB

  • Sample

    241207-xhtp8atlgj

  • MD5

    eb48477271572c6589faed3de0a22420

  • SHA1

    ad4fe8092ab79c942e4f55c82dc160bb95885258

  • SHA256

    511e7048c26382693bc5949169e611c67e51687088fcd383453ca5586dc9f9ed

  • SHA512

    74f037cb5f2174f478adcdde225b1f9fa66d2477ef99c79cee66bbb3abcbcff5be80b4f38e7f9c0c881978da74bf1814331494636319b31cdb5f07e9f8f1661f

  • SSDEEP

    12288:3o7CGWcQSyYI2VrFKH5RBv9AQ1pEDdKop:3MUv2LAv9AQ1p4dKY

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      511e7048c26382693bc5949169e611c67e51687088fcd383453ca5586dc9f9edN.exe

    • Size

      508KB

    • MD5

      eb48477271572c6589faed3de0a22420

    • SHA1

      ad4fe8092ab79c942e4f55c82dc160bb95885258

    • SHA256

      511e7048c26382693bc5949169e611c67e51687088fcd383453ca5586dc9f9ed

    • SHA512

      74f037cb5f2174f478adcdde225b1f9fa66d2477ef99c79cee66bbb3abcbcff5be80b4f38e7f9c0c881978da74bf1814331494636319b31cdb5f07e9f8f1661f

    • SSDEEP

      12288:3o7CGWcQSyYI2VrFKH5RBv9AQ1pEDdKop:3MUv2LAv9AQ1p4dKY

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks