General

  • Target

    83e4ddcce6648da1af93d068a4ea079b7ac1de84fdb2f586ac2bd01f5fdc9368.exe

  • Size

    77KB

  • Sample

    241217-k2q28awka1

  • MD5

    ba5966e7a7005c0fe037d9db80ea7b34

  • SHA1

    9233b4ba19c3dc77b14f5ed5121df173680c1964

  • SHA256

    83e4ddcce6648da1af93d068a4ea079b7ac1de84fdb2f586ac2bd01f5fdc9368

  • SHA512

    5dc8c6d4ba70e887d0b5fc3babfcde45feae30c9caa521ed0e64ba9a614fd48d06a07d732378ddc9203be963a0073fe753b994d09334383a62ea1cfffe211d44

  • SSDEEP

    1536:1D433Oe20lleqbmruXP+9E5KJ+e8XwhpfB:1Dcpl1mrE+EeBJfZ

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.208

112.175.88.207

Targets

    • Target

      83e4ddcce6648da1af93d068a4ea079b7ac1de84fdb2f586ac2bd01f5fdc9368.exe

    • Size

      77KB

    • MD5

      ba5966e7a7005c0fe037d9db80ea7b34

    • SHA1

      9233b4ba19c3dc77b14f5ed5121df173680c1964

    • SHA256

      83e4ddcce6648da1af93d068a4ea079b7ac1de84fdb2f586ac2bd01f5fdc9368

    • SHA512

      5dc8c6d4ba70e887d0b5fc3babfcde45feae30c9caa521ed0e64ba9a614fd48d06a07d732378ddc9203be963a0073fe753b994d09334383a62ea1cfffe211d44

    • SSDEEP

      1536:1D433Oe20lleqbmruXP+9E5KJ+e8XwhpfB:1Dcpl1mrE+EeBJfZ

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks