General

  • Target

    ea6fa10a8cc8052b1fb60fe5a5351cbd590ea39e5a448662b31af1d71e7c8a56.exe

  • Size

    92KB

  • Sample

    250121-hq4sts1rbx

  • MD5

    cf70e103d4070605ba7c73469dd62ba3

  • SHA1

    3b7a744b5d2b72831ec560ba23b804daf87b16ba

  • SHA256

    ea6fa10a8cc8052b1fb60fe5a5351cbd590ea39e5a448662b31af1d71e7c8a56

  • SHA512

    54233286f7a81270b5439bd30f5cd61d6adf4eb125b77bd0d7044852123164d9109ebe73db2ced1d6d8528e3cdd468dde5726da940eeb9ddca99431892daafed

  • SSDEEP

    1536:iDJj/L6UWX/iDdolO4g033dsA2+n1qn1iLdpl:iDJj29G4gItR7n1qn4LdT

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.77

218.54.47.74

Targets

    • Target

      ea6fa10a8cc8052b1fb60fe5a5351cbd590ea39e5a448662b31af1d71e7c8a56.exe

    • Size

      92KB

    • MD5

      cf70e103d4070605ba7c73469dd62ba3

    • SHA1

      3b7a744b5d2b72831ec560ba23b804daf87b16ba

    • SHA256

      ea6fa10a8cc8052b1fb60fe5a5351cbd590ea39e5a448662b31af1d71e7c8a56

    • SHA512

      54233286f7a81270b5439bd30f5cd61d6adf4eb125b77bd0d7044852123164d9109ebe73db2ced1d6d8528e3cdd468dde5726da940eeb9ddca99431892daafed

    • SSDEEP

      1536:iDJj/L6UWX/iDdolO4g033dsA2+n1qn1iLdpl:iDJj29G4gItR7n1qn4LdT

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks