General

  • Target

    f7b62d6f6b43f6e06fcf542ffa3403760724b430ceabdd225c88a217154b9273N.exe

  • Size

    66KB

  • Sample

    241216-wj1pgsxnar

  • MD5

    24cdb4addc5fffaad2636cb3973672f0

  • SHA1

    5b6c42471a253df25f36df7fe71e798a035e3daf

  • SHA256

    f7b62d6f6b43f6e06fcf542ffa3403760724b430ceabdd225c88a217154b9273

  • SHA512

    6eccd35623ad57ba1082ffb2f8881f18a83a1aa8e61b0ba62b345eda2c407ffd0d5d395219cf715ceb9a7a004f99dd8973c151be28c37ae5d31433579835d97d

  • SSDEEP

    1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTmUD0s:6bQRSHpAvzyf7MzeThD0s

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      f7b62d6f6b43f6e06fcf542ffa3403760724b430ceabdd225c88a217154b9273N.exe

    • Size

      66KB

    • MD5

      24cdb4addc5fffaad2636cb3973672f0

    • SHA1

      5b6c42471a253df25f36df7fe71e798a035e3daf

    • SHA256

      f7b62d6f6b43f6e06fcf542ffa3403760724b430ceabdd225c88a217154b9273

    • SHA512

      6eccd35623ad57ba1082ffb2f8881f18a83a1aa8e61b0ba62b345eda2c407ffd0d5d395219cf715ceb9a7a004f99dd8973c151be28c37ae5d31433579835d97d

    • SSDEEP

      1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTmUD0s:6bQRSHpAvzyf7MzeThD0s

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks