General

  • Target

    9948f02275c698e07317fdc1fd1075964a0130a193e75240fdb5162bde4c5927N.exe

  • Size

    68KB

  • Sample

    250117-sac1aasmct

  • MD5

    937a04ad0c41c263a0193a644a2f3040

  • SHA1

    763510fd2dbe3540b2a02d18d6665c0f0a0a17e0

  • SHA256

    9948f02275c698e07317fdc1fd1075964a0130a193e75240fdb5162bde4c5927

  • SHA512

    d18cd8a0764fd2ebaee1d814b020008fc214d14fb0b2806259dfd87007da69c1f28a39340ff1e2edd79c2dfa740a458008088a563e9a436607fbef1b8d83fd39

  • SSDEEP

    1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCar8:yLAYUzmdD0sMQl7d7IuhCao

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      9948f02275c698e07317fdc1fd1075964a0130a193e75240fdb5162bde4c5927N.exe

    • Size

      68KB

    • MD5

      937a04ad0c41c263a0193a644a2f3040

    • SHA1

      763510fd2dbe3540b2a02d18d6665c0f0a0a17e0

    • SHA256

      9948f02275c698e07317fdc1fd1075964a0130a193e75240fdb5162bde4c5927

    • SHA512

      d18cd8a0764fd2ebaee1d814b020008fc214d14fb0b2806259dfd87007da69c1f28a39340ff1e2edd79c2dfa740a458008088a563e9a436607fbef1b8d83fd39

    • SSDEEP

      1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCar8:yLAYUzmdD0sMQl7d7IuhCao

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks