General

  • Target

    6e82940a817c10d732982017f6e0ace260adafdcdfc345a9ed7b534fce1211a4.exe

  • Size

    93KB

  • Sample

    241221-2wlzraspc1

  • MD5

    7498021ea59119fbfa40e8079767d50e

  • SHA1

    b00d1734ba52fd095918ac15fb5682b970c44aad

  • SHA256

    6e82940a817c10d732982017f6e0ace260adafdcdfc345a9ed7b534fce1211a4

  • SHA512

    3a493842a48dbf6dbf23b4dd0f74f265cc1d8b4a5afcaea8dd69982f9c9b838d95904d41023769d10edb940a0915f6b15d61b2d54c73e7105a8da16daf1637ba

  • SSDEEP

    768:2geZ5QeklJQ35pPRuIkUD1sYAQ/TN71N1adOZSHj9jaSCpOzIi7D8kUUUNUEwz:heZqP25TuIfmS7Fv1aUZSD9yiIHaz

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.28.139

121.88.5.183

Targets

    • Target

      6e82940a817c10d732982017f6e0ace260adafdcdfc345a9ed7b534fce1211a4.exe

    • Size

      93KB

    • MD5

      7498021ea59119fbfa40e8079767d50e

    • SHA1

      b00d1734ba52fd095918ac15fb5682b970c44aad

    • SHA256

      6e82940a817c10d732982017f6e0ace260adafdcdfc345a9ed7b534fce1211a4

    • SHA512

      3a493842a48dbf6dbf23b4dd0f74f265cc1d8b4a5afcaea8dd69982f9c9b838d95904d41023769d10edb940a0915f6b15d61b2d54c73e7105a8da16daf1637ba

    • SSDEEP

      768:2geZ5QeklJQ35pPRuIkUD1sYAQ/TN71N1adOZSHj9jaSCpOzIi7D8kUUUNUEwz:heZqP25TuIfmS7Fv1aUZSD9yiIHaz

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks