General

  • Target

    bacd51b12d3fc348e45b586fc73176f084d435e348f7a655a64f311f6bbf4b6fN.exe

  • Size

    55KB

  • Sample

    241217-lnxhhswnbt

  • MD5

    0502f676e17cb28dc766017dbb4b4690

  • SHA1

    6895b601936c9f40d035696e79ada9e7f369665f

  • SHA256

    bacd51b12d3fc348e45b586fc73176f084d435e348f7a655a64f311f6bbf4b6f

  • SHA512

    1474e267363829473162f2543427ff44ffa4dadf968648b9231ffbbff8908872687a6f97c2aceec5f0951a78ba15c864e936fef6918d2dad805dda339b0149f6

  • SSDEEP

    768:egjKOwfkQsxi4CUWsFZzdXCHuWFpuQlBVQayBAFp1pAK4gpuK1cnPdFmfbpA9ANY:bKOjssTdFMsAX1pA6G0qm1Y8jgFzZ

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      bacd51b12d3fc348e45b586fc73176f084d435e348f7a655a64f311f6bbf4b6fN.exe

    • Size

      55KB

    • MD5

      0502f676e17cb28dc766017dbb4b4690

    • SHA1

      6895b601936c9f40d035696e79ada9e7f369665f

    • SHA256

      bacd51b12d3fc348e45b586fc73176f084d435e348f7a655a64f311f6bbf4b6f

    • SHA512

      1474e267363829473162f2543427ff44ffa4dadf968648b9231ffbbff8908872687a6f97c2aceec5f0951a78ba15c864e936fef6918d2dad805dda339b0149f6

    • SSDEEP

      768:egjKOwfkQsxi4CUWsFZzdXCHuWFpuQlBVQayBAFp1pAK4gpuK1cnPdFmfbpA9ANY:bKOjssTdFMsAX1pA6G0qm1Y8jgFzZ

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks