General

  • Target

    097cd2971fae22bd568cfaf3450f67384783b98b6f4973e6a24c43a9511f5833N.exe

  • Size

    51KB

  • Sample

    241222-nn633awrhm

  • MD5

    bc3e522ed97265ba10707ba34fbc5240

  • SHA1

    6cefae62c5f70f3b830fad068bcc5b283d2991f9

  • SHA256

    097cd2971fae22bd568cfaf3450f67384783b98b6f4973e6a24c43a9511f5833

  • SHA512

    f5ba46322952f7406da504f3982daf01e880be26823e532e424b316c9cd5ac42edcf66635727c771fbc32ddec2f49e43dc910d6ba9ce6d279bb8912f135d537e

  • SSDEEP

    1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhte:KsdXfBo/DBJBGzkP5k

Score
10/10

Malware Config

Extracted

Family

urelas

C2

121.88.5.183

218.54.28.139

Targets

    • Target

      097cd2971fae22bd568cfaf3450f67384783b98b6f4973e6a24c43a9511f5833N.exe

    • Size

      51KB

    • MD5

      bc3e522ed97265ba10707ba34fbc5240

    • SHA1

      6cefae62c5f70f3b830fad068bcc5b283d2991f9

    • SHA256

      097cd2971fae22bd568cfaf3450f67384783b98b6f4973e6a24c43a9511f5833

    • SHA512

      f5ba46322952f7406da504f3982daf01e880be26823e532e424b316c9cd5ac42edcf66635727c771fbc32ddec2f49e43dc910d6ba9ce6d279bb8912f135d537e

    • SSDEEP

      1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhte:KsdXfBo/DBJBGzkP5k

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks