General

  • Target

    e5159eee09b252923c7ae8ffe2ab90a7c771a840462c454761602561bf6752eeN.exe

  • Size

    476KB

  • Sample

    250117-c8wx2szjht

  • MD5

    46352f161dc8a1a881cadad39759d540

  • SHA1

    72c614b160072cfd03722eabe2067d993a44f2c3

  • SHA256

    e5159eee09b252923c7ae8ffe2ab90a7c771a840462c454761602561bf6752ee

  • SHA512

    65349572521cf4dedd3d2960362866056ded85b0c510d1623deff13bd2cf88479bf6882c648ef44c06f11a889aa7843b58a159ee752080589fb8eed725085d9e

  • SSDEEP

    6144:CTi96BdkH51VwQg6ZyEuA9WU3C8Pd+fFPsjP/:CTi96QpwQ1yVAd3C8VgFPY3

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.226

218.54.31.165

Targets

    • Target

      e5159eee09b252923c7ae8ffe2ab90a7c771a840462c454761602561bf6752eeN.exe

    • Size

      476KB

    • MD5

      46352f161dc8a1a881cadad39759d540

    • SHA1

      72c614b160072cfd03722eabe2067d993a44f2c3

    • SHA256

      e5159eee09b252923c7ae8ffe2ab90a7c771a840462c454761602561bf6752ee

    • SHA512

      65349572521cf4dedd3d2960362866056ded85b0c510d1623deff13bd2cf88479bf6882c648ef44c06f11a889aa7843b58a159ee752080589fb8eed725085d9e

    • SSDEEP

      6144:CTi96BdkH51VwQg6ZyEuA9WU3C8Pd+fFPsjP/:CTi96QpwQ1yVAd3C8VgFPY3

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks