General

  • Target

    e286b463e845bb5b609a3d45b6a5ac5c5a3c1219fbab1f17da5ab318c90f8137N.exe

  • Size

    68KB

  • Sample

    241219-1n57zs1jb1

  • MD5

    f85b03881414df2e80f44a0694261fc0

  • SHA1

    40783dcb8d37a65560e3e7bb9bb1fd89b92a5dab

  • SHA256

    e286b463e845bb5b609a3d45b6a5ac5c5a3c1219fbab1f17da5ab318c90f8137

  • SHA512

    ea794b7dd2262e126864cb5107e12cf7989308313dc600a73e4b0e10df429dc5efedee8c8bb141521af692d3bb7c5b2f0be4e0d5844fc806104b56ac177092b4

  • SSDEEP

    1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCart:yLAYUzmdD0sMQl7d7IuhCaJ

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      e286b463e845bb5b609a3d45b6a5ac5c5a3c1219fbab1f17da5ab318c90f8137N.exe

    • Size

      68KB

    • MD5

      f85b03881414df2e80f44a0694261fc0

    • SHA1

      40783dcb8d37a65560e3e7bb9bb1fd89b92a5dab

    • SHA256

      e286b463e845bb5b609a3d45b6a5ac5c5a3c1219fbab1f17da5ab318c90f8137

    • SHA512

      ea794b7dd2262e126864cb5107e12cf7989308313dc600a73e4b0e10df429dc5efedee8c8bb141521af692d3bb7c5b2f0be4e0d5844fc806104b56ac177092b4

    • SSDEEP

      1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCart:yLAYUzmdD0sMQl7d7IuhCaJ

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks