General

  • Target

    c9ada9752a8951c74e6a06115df790c40c89bb881410e34a83bf358319d7a02fN.exe

  • Size

    69KB

  • Sample

    241216-sbpepstqbk

  • MD5

    6abd23458b2facfeae286f2917ad0050

  • SHA1

    297e973974ff3bca0100f428e9ed9d00736f05d7

  • SHA256

    c9ada9752a8951c74e6a06115df790c40c89bb881410e34a83bf358319d7a02f

  • SHA512

    96630c05ff83bf901393221c6ab299d5fe49989bec05ac22a97340082b6c7327545b57f3a5f10b0306b89a395a863ea81783814476a6b5bd164667ec44d869fd

  • SSDEEP

    1536:04/WgLAjdZsp+uChoLnDeoqYAJjvLFymnHsPeOrW:l//AjMp+u2onejH2PeEW

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      c9ada9752a8951c74e6a06115df790c40c89bb881410e34a83bf358319d7a02fN.exe

    • Size

      69KB

    • MD5

      6abd23458b2facfeae286f2917ad0050

    • SHA1

      297e973974ff3bca0100f428e9ed9d00736f05d7

    • SHA256

      c9ada9752a8951c74e6a06115df790c40c89bb881410e34a83bf358319d7a02f

    • SHA512

      96630c05ff83bf901393221c6ab299d5fe49989bec05ac22a97340082b6c7327545b57f3a5f10b0306b89a395a863ea81783814476a6b5bd164667ec44d869fd

    • SSDEEP

      1536:04/WgLAjdZsp+uChoLnDeoqYAJjvLFymnHsPeOrW:l//AjMp+u2onejH2PeEW

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks