General

  • Target

    4c01e91e5ca898f23f5b498482623a4ecb24e4775a211dec52c0eb4a7eeebd03N.exe

  • Size

    81KB

  • Sample

    241216-kvtjrstjfy

  • MD5

    d21a935b031667728fbc09c0d9d38ec0

  • SHA1

    03cb26b130ba8465fb4b438b616447a4d8487e50

  • SHA256

    4c01e91e5ca898f23f5b498482623a4ecb24e4775a211dec52c0eb4a7eeebd03

  • SHA512

    d4d41dfaa3e23a859866b4f42f8d5674b437383e103e5377788911839c6381b5d0cc3772a5cd565d00e53103bb1553d4a5d90f8f9b37c6a7376550abbfe3bab9

  • SSDEEP

    1536:UOzC0tKyIy9nOM8e5rqYJkdpzCEw2dnU4qv8L:UO9Ro2rqYyXzCEwG7

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      4c01e91e5ca898f23f5b498482623a4ecb24e4775a211dec52c0eb4a7eeebd03N.exe

    • Size

      81KB

    • MD5

      d21a935b031667728fbc09c0d9d38ec0

    • SHA1

      03cb26b130ba8465fb4b438b616447a4d8487e50

    • SHA256

      4c01e91e5ca898f23f5b498482623a4ecb24e4775a211dec52c0eb4a7eeebd03

    • SHA512

      d4d41dfaa3e23a859866b4f42f8d5674b437383e103e5377788911839c6381b5d0cc3772a5cd565d00e53103bb1553d4a5d90f8f9b37c6a7376550abbfe3bab9

    • SSDEEP

      1536:UOzC0tKyIy9nOM8e5rqYJkdpzCEw2dnU4qv8L:UO9Ro2rqYyXzCEwG7

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks