General

  • Target

    df8eace74bbdafbd47534f36f794e851ff4999fa98c7461218676aa72317d870.exe

  • Size

    81KB

  • Sample

    250119-nv3n8awpal

  • MD5

    3baf480db7537bf745697e548ea71e3b

  • SHA1

    fc8612735a8f7592cae5debc660bca7a623f1f80

  • SHA256

    df8eace74bbdafbd47534f36f794e851ff4999fa98c7461218676aa72317d870

  • SHA512

    cc6eb7904c348b614ed29330fdff4df2f1cbb214641cc3ae571952f0987a2d965f173ab24ff49d1b1d03db8dfb0fc93f10c4a27e1edbba2d18c6b7e5e70566f6

  • SSDEEP

    1536:UOzC0tKyIy9nOM8e5rqYJkdpzCEw2dnU4qv8+:UO9Ro2rqYyXzCEwGO

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      df8eace74bbdafbd47534f36f794e851ff4999fa98c7461218676aa72317d870.exe

    • Size

      81KB

    • MD5

      3baf480db7537bf745697e548ea71e3b

    • SHA1

      fc8612735a8f7592cae5debc660bca7a623f1f80

    • SHA256

      df8eace74bbdafbd47534f36f794e851ff4999fa98c7461218676aa72317d870

    • SHA512

      cc6eb7904c348b614ed29330fdff4df2f1cbb214641cc3ae571952f0987a2d965f173ab24ff49d1b1d03db8dfb0fc93f10c4a27e1edbba2d18c6b7e5e70566f6

    • SSDEEP

      1536:UOzC0tKyIy9nOM8e5rqYJkdpzCEw2dnU4qv8+:UO9Ro2rqYyXzCEwGO

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks