General

  • Target

    580e7e7073aaf40b8e8dfca018543e534f44bf9ad3a620a7e727925fc7eb8eec.exe

  • Size

    335KB

  • Sample

    250117-e91nqstjbp

  • MD5

    306a25f7a1b018a8e5c7d1b25eb747aa

  • SHA1

    b6e1e08204c8a582f115165238c4da65d2c00d41

  • SHA256

    580e7e7073aaf40b8e8dfca018543e534f44bf9ad3a620a7e727925fc7eb8eec

  • SHA512

    e3f54f453618d86ee36816a6b07b3d5b9ef09c627e87d8f6e7b492eb74369aff4105044cb2df96a6d50ad2e0d17747a8e359843188df288fd841b0f057e309b7

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcz:vHW138/iXWlK885rKlGSekcj66ciE

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      580e7e7073aaf40b8e8dfca018543e534f44bf9ad3a620a7e727925fc7eb8eec.exe

    • Size

      335KB

    • MD5

      306a25f7a1b018a8e5c7d1b25eb747aa

    • SHA1

      b6e1e08204c8a582f115165238c4da65d2c00d41

    • SHA256

      580e7e7073aaf40b8e8dfca018543e534f44bf9ad3a620a7e727925fc7eb8eec

    • SHA512

      e3f54f453618d86ee36816a6b07b3d5b9ef09c627e87d8f6e7b492eb74369aff4105044cb2df96a6d50ad2e0d17747a8e359843188df288fd841b0f057e309b7

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcz:vHW138/iXWlK885rKlGSekcj66ciE

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks