General

  • Target

    74aa019566ec3267791f75f24f4da3c3cc6b9814b37da8dea287639dcc5c51a5N.exe

  • Size

    51KB

  • Sample

    241216-m11ldaxmas

  • MD5

    de6a83dccbb4637f6998ab3d902bc520

  • SHA1

    3dbbd9e0e3fb9cac1a1f11ed770d7d272a5a0ffd

  • SHA256

    74aa019566ec3267791f75f24f4da3c3cc6b9814b37da8dea287639dcc5c51a5

  • SHA512

    54839947280f83df6340d1ea3b5b14c1fcb40221d6d848426c10e8897e2a32c0ea76801a73c089aed8ac68c9c156a6213682bd5cc9883c0b8eaf8e7d310d5838

  • SSDEEP

    1536:lVeVFl6sRsDnQi1Mek/pFRMfKaP7cFwQkXuJXqmrM:v23sD1vSP6cOYXqm4

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      74aa019566ec3267791f75f24f4da3c3cc6b9814b37da8dea287639dcc5c51a5N.exe

    • Size

      51KB

    • MD5

      de6a83dccbb4637f6998ab3d902bc520

    • SHA1

      3dbbd9e0e3fb9cac1a1f11ed770d7d272a5a0ffd

    • SHA256

      74aa019566ec3267791f75f24f4da3c3cc6b9814b37da8dea287639dcc5c51a5

    • SHA512

      54839947280f83df6340d1ea3b5b14c1fcb40221d6d848426c10e8897e2a32c0ea76801a73c089aed8ac68c9c156a6213682bd5cc9883c0b8eaf8e7d310d5838

    • SSDEEP

      1536:lVeVFl6sRsDnQi1Mek/pFRMfKaP7cFwQkXuJXqmrM:v23sD1vSP6cOYXqm4

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks