General

  • Target

    c7853e63748e21c6eb845740fbb4f5502b43cd667047d55da62eb493aba9daf8N.exe

  • Size

    81KB

  • Sample

    250120-25s5estqfp

  • MD5

    67944d338536626e4adf29717c4e5af0

  • SHA1

    1249d9ee43a1ce4c1a4886bcc1fa3bf91b486016

  • SHA256

    c7853e63748e21c6eb845740fbb4f5502b43cd667047d55da62eb493aba9daf8

  • SHA512

    c4bae1b8f31abd2dd8e9af4849ff924aa40a64bdd03cdb24de6796ccbc89afdd94c90f2a98d7298f40dfd12d1af0f33c2457a3e24c7cefdeb81ab8bd4e6189a4

  • SSDEEP

    1536:UOzC0tKyIy9nOM8e5rqYJkdpzCEw2dnU4qv8v:UO9Ro2rqYyXzCEwG/

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      c7853e63748e21c6eb845740fbb4f5502b43cd667047d55da62eb493aba9daf8N.exe

    • Size

      81KB

    • MD5

      67944d338536626e4adf29717c4e5af0

    • SHA1

      1249d9ee43a1ce4c1a4886bcc1fa3bf91b486016

    • SHA256

      c7853e63748e21c6eb845740fbb4f5502b43cd667047d55da62eb493aba9daf8

    • SHA512

      c4bae1b8f31abd2dd8e9af4849ff924aa40a64bdd03cdb24de6796ccbc89afdd94c90f2a98d7298f40dfd12d1af0f33c2457a3e24c7cefdeb81ab8bd4e6189a4

    • SSDEEP

      1536:UOzC0tKyIy9nOM8e5rqYJkdpzCEw2dnU4qv8v:UO9Ro2rqYyXzCEwG/

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks