General

  • Target

    f529eed2bdfa7c81bbe6a9131721e0f7640b852325f959df9768e827e1e7198c.exe

  • Size

    81KB

  • Sample

    250120-vxqwrszqey

  • MD5

    13f83fd3ed9baedc5ab4bf7923e82273

  • SHA1

    42cb58fb0210572f92e0b6c13fb9c276cce1ae68

  • SHA256

    f529eed2bdfa7c81bbe6a9131721e0f7640b852325f959df9768e827e1e7198c

  • SHA512

    a0b270b89b82583101b8583cf0b97dfb7e2639af8491733ba326d1166783702d29ec4b12e32ad23cd9deee7674dbc7f3466f20c5a793565ceadcd5ef2ec701f5

  • SSDEEP

    1536:UOzC0tKyIy9nOM8e5rqYJkdpzCEw2dnU4qv8P:UO9Ro2rqYyXzCEwGf

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      f529eed2bdfa7c81bbe6a9131721e0f7640b852325f959df9768e827e1e7198c.exe

    • Size

      81KB

    • MD5

      13f83fd3ed9baedc5ab4bf7923e82273

    • SHA1

      42cb58fb0210572f92e0b6c13fb9c276cce1ae68

    • SHA256

      f529eed2bdfa7c81bbe6a9131721e0f7640b852325f959df9768e827e1e7198c

    • SHA512

      a0b270b89b82583101b8583cf0b97dfb7e2639af8491733ba326d1166783702d29ec4b12e32ad23cd9deee7674dbc7f3466f20c5a793565ceadcd5ef2ec701f5

    • SSDEEP

      1536:UOzC0tKyIy9nOM8e5rqYJkdpzCEw2dnU4qv8P:UO9Ro2rqYyXzCEwGf

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks