General

  • Target

    1d8de30ba1e8234d3c9e192c55b5a7964ebcbbf1b4059e76005165ab9a7182bc.exe

  • Size

    60KB

  • Sample

    250121-er7z4awkdr

  • MD5

    11d886d179241a15a222d393621aad77

  • SHA1

    9bb4e578bcb8445dad90e2260a0d4779c286863a

  • SHA256

    1d8de30ba1e8234d3c9e192c55b5a7964ebcbbf1b4059e76005165ab9a7182bc

  • SHA512

    981dbe6ca9fb02b6cfc80e42a877edc75b138370c2b7317fc57ebbac273449f0f7f1e6c5c3bcf79f108d58a06c2622a650a9e6376f3e5abcf69e93d49db2cd1e

  • SSDEEP

    768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPT:nK0GjMeQG3iaQREuVZ6ro29p4YxbKd9e

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      1d8de30ba1e8234d3c9e192c55b5a7964ebcbbf1b4059e76005165ab9a7182bc.exe

    • Size

      60KB

    • MD5

      11d886d179241a15a222d393621aad77

    • SHA1

      9bb4e578bcb8445dad90e2260a0d4779c286863a

    • SHA256

      1d8de30ba1e8234d3c9e192c55b5a7964ebcbbf1b4059e76005165ab9a7182bc

    • SHA512

      981dbe6ca9fb02b6cfc80e42a877edc75b138370c2b7317fc57ebbac273449f0f7f1e6c5c3bcf79f108d58a06c2622a650a9e6376f3e5abcf69e93d49db2cd1e

    • SSDEEP

      768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPT:nK0GjMeQG3iaQREuVZ6ro29p4YxbKd9e

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks