General

  • Target

    832b6c5c5f428326d0d91bec3665acc9ce2cb3201bcc3bd305e53a9c778ba223N.exe

  • Size

    334KB

  • Sample

    250121-lb2ayawpbz

  • MD5

    cfc55c938e4f32fe0f7362217096ace0

  • SHA1

    ad0e85e005c0f9f85a0123d006f2725352460ac5

  • SHA256

    832b6c5c5f428326d0d91bec3665acc9ce2cb3201bcc3bd305e53a9c778ba223

  • SHA512

    7b1457ec3bdba8e219a700632d15665d37b6c7ff28852b032755a8dbac02aba9026320e429828bfacfddc9c96ddf74be44516f7f4082d0a2f2ff4ef8c2c747e1

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIg:vHW138/iXWlK885rKlGSekcj66ciO

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      832b6c5c5f428326d0d91bec3665acc9ce2cb3201bcc3bd305e53a9c778ba223N.exe

    • Size

      334KB

    • MD5

      cfc55c938e4f32fe0f7362217096ace0

    • SHA1

      ad0e85e005c0f9f85a0123d006f2725352460ac5

    • SHA256

      832b6c5c5f428326d0d91bec3665acc9ce2cb3201bcc3bd305e53a9c778ba223

    • SHA512

      7b1457ec3bdba8e219a700632d15665d37b6c7ff28852b032755a8dbac02aba9026320e429828bfacfddc9c96ddf74be44516f7f4082d0a2f2ff4ef8c2c747e1

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIg:vHW138/iXWlK885rKlGSekcj66ciO

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks