General

  • Target

    d2ce60f5f924174fca24a38a45fb70a2de8cf6142ab3bb82e5ae0baeb33cf8edN.exe

  • Size

    77KB

  • Sample

    241219-agkplaypej

  • MD5

    48cef7aeed25b7247ff2736bb4e74630

  • SHA1

    1806846485aef5af14b99a0017230b1099c6cdec

  • SHA256

    d2ce60f5f924174fca24a38a45fb70a2de8cf6142ab3bb82e5ae0baeb33cf8ed

  • SHA512

    09c461496fe10e76e85b11befbca37c828b00617b60de8688594d0c3d614c4ff42536d762badf2a5acb56ea928f400aae14bf16c43af34fdab25ebaff7011126

  • SSDEEP

    1536:1D433Oe20lleqbmruXP+9E5KJ+e8XwhpfK:1Dcpl1mrE+EeBJfC

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.208

112.175.88.207

Targets

    • Target

      d2ce60f5f924174fca24a38a45fb70a2de8cf6142ab3bb82e5ae0baeb33cf8edN.exe

    • Size

      77KB

    • MD5

      48cef7aeed25b7247ff2736bb4e74630

    • SHA1

      1806846485aef5af14b99a0017230b1099c6cdec

    • SHA256

      d2ce60f5f924174fca24a38a45fb70a2de8cf6142ab3bb82e5ae0baeb33cf8ed

    • SHA512

      09c461496fe10e76e85b11befbca37c828b00617b60de8688594d0c3d614c4ff42536d762badf2a5acb56ea928f400aae14bf16c43af34fdab25ebaff7011126

    • SSDEEP

      1536:1D433Oe20lleqbmruXP+9E5KJ+e8XwhpfK:1Dcpl1mrE+EeBJfC

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks