General

  • Target

    3a07ae8d918baa159685c01ccbdccb2bea013853750077f65a5fe42899b88fb9.exe

  • Size

    327KB

  • Sample

    250117-evm44asnbl

  • MD5

    79a6264afe124aa105ffe7a9dcf6e7a2

  • SHA1

    3d05e68e1ab46578a4788969879a6a1cb972ca9b

  • SHA256

    3a07ae8d918baa159685c01ccbdccb2bea013853750077f65a5fe42899b88fb9

  • SHA512

    0e89d063035bd765162c487d2214190e4fae4190301cdaf0e131e4e2d941e90327bf3693d412f2338b4a6703c73b84788d3a86e97eee3897e9782c0229baabed

  • SSDEEP

    6144:DX+psoWJ+IvLI7BziS3qoJGd2Gegu8JKSFGbJ+7+3LdfoPZmxMcVp0K:ymoWkI094og2GXfJKnbkS3LdAPZkiK

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.226

218.54.31.165

Targets

    • Target

      3a07ae8d918baa159685c01ccbdccb2bea013853750077f65a5fe42899b88fb9.exe

    • Size

      327KB

    • MD5

      79a6264afe124aa105ffe7a9dcf6e7a2

    • SHA1

      3d05e68e1ab46578a4788969879a6a1cb972ca9b

    • SHA256

      3a07ae8d918baa159685c01ccbdccb2bea013853750077f65a5fe42899b88fb9

    • SHA512

      0e89d063035bd765162c487d2214190e4fae4190301cdaf0e131e4e2d941e90327bf3693d412f2338b4a6703c73b84788d3a86e97eee3897e9782c0229baabed

    • SSDEEP

      6144:DX+psoWJ+IvLI7BziS3qoJGd2Gegu8JKSFGbJ+7+3LdfoPZmxMcVp0K:ymoWkI094og2GXfJKnbkS3LdAPZkiK

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks