General

  • Target

    80224c75ae756cbfbdf0916edb9921eb0f00724cefcca8d06bdd008001e0cbb4.exe

  • Size

    52KB

  • Sample

    241222-b9ngmaymfk

  • MD5

    53f7562f5cfab376dc22d3325487890e

  • SHA1

    fd32674fe35de1f7d033021f7e7e1f2abfe85280

  • SHA256

    80224c75ae756cbfbdf0916edb9921eb0f00724cefcca8d06bdd008001e0cbb4

  • SHA512

    91421292eafd139988289971a8f5091626641f10155ff4f318f8bebbad16243cf4d8ad47b4d793fd93a2d60d788518494ea1046854c7e7dff45e73b3f1f6a9d5

  • SSDEEP

    1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhPl:KsdXfBo/DBJBGzkP5Pl

Score
10/10

Malware Config

Extracted

Family

urelas

C2

121.88.5.183

218.54.28.139

Targets

    • Target

      80224c75ae756cbfbdf0916edb9921eb0f00724cefcca8d06bdd008001e0cbb4.exe

    • Size

      52KB

    • MD5

      53f7562f5cfab376dc22d3325487890e

    • SHA1

      fd32674fe35de1f7d033021f7e7e1f2abfe85280

    • SHA256

      80224c75ae756cbfbdf0916edb9921eb0f00724cefcca8d06bdd008001e0cbb4

    • SHA512

      91421292eafd139988289971a8f5091626641f10155ff4f318f8bebbad16243cf4d8ad47b4d793fd93a2d60d788518494ea1046854c7e7dff45e73b3f1f6a9d5

    • SSDEEP

      1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhPl:KsdXfBo/DBJBGzkP5Pl

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks