General

  • Target

    de9aa85cc6db379e1d8ca80a4522611da38f3fba63956a22747a6d360d9ec504N.exe

  • Size

    62KB

  • Sample

    241208-a474easret

  • MD5

    235624e41182355162b9b273e1205680

  • SHA1

    666dc4c670fe1649455a2fac736e180c4733516b

  • SHA256

    de9aa85cc6db379e1d8ca80a4522611da38f3fba63956a22747a6d360d9ec504

  • SHA512

    0fa906be6e3c50f3bb7522cd5e7e53090eeede7efc3cf57f75273a018dbdfddce52ac56dbb6b6a5d390a5d97b33e5117bafc887e68e3159c3799f44c37f98df6

  • SSDEEP

    1536:saTkcl2v/z0thjkh6+uYLo31d0JuPrROVd6F:Jo0cAthu6+FQ0JuPkd6F

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      de9aa85cc6db379e1d8ca80a4522611da38f3fba63956a22747a6d360d9ec504N.exe

    • Size

      62KB

    • MD5

      235624e41182355162b9b273e1205680

    • SHA1

      666dc4c670fe1649455a2fac736e180c4733516b

    • SHA256

      de9aa85cc6db379e1d8ca80a4522611da38f3fba63956a22747a6d360d9ec504

    • SHA512

      0fa906be6e3c50f3bb7522cd5e7e53090eeede7efc3cf57f75273a018dbdfddce52ac56dbb6b6a5d390a5d97b33e5117bafc887e68e3159c3799f44c37f98df6

    • SSDEEP

      1536:saTkcl2v/z0thjkh6+uYLo31d0JuPrROVd6F:Jo0cAthu6+FQ0JuPkd6F

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks