General

  • Target

    05d75993b757055e5ad8bc8a99776341f7bc2f5a8083446c04035bc8b24f971dN.exe

  • Size

    92KB

  • Sample

    250121-njm5ds1qbr

  • MD5

    d4432d51d185f01b1080e01fdb23d1d0

  • SHA1

    ced05141c319b560a2394ea78cd391fcaacf1f63

  • SHA256

    05d75993b757055e5ad8bc8a99776341f7bc2f5a8083446c04035bc8b24f971d

  • SHA512

    328a18b8451b806065f337055ed0da923cdf00065d24f312620bfa6a0bf60697295b5402edb4701570155506430d8afa24a60c6490c4063e41784e177fb27494

  • SSDEEP

    768:2geZ5QeklJQ35pPRuIkUD1sYAQ/TN71N1adOZSHj9jaSCpOzIi7D8kUUUNUEwDj:heZqP25TuIfmS7Fv1aUZSD9yiIHaX

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.28.139

121.88.5.183

Targets

    • Target

      05d75993b757055e5ad8bc8a99776341f7bc2f5a8083446c04035bc8b24f971dN.exe

    • Size

      92KB

    • MD5

      d4432d51d185f01b1080e01fdb23d1d0

    • SHA1

      ced05141c319b560a2394ea78cd391fcaacf1f63

    • SHA256

      05d75993b757055e5ad8bc8a99776341f7bc2f5a8083446c04035bc8b24f971d

    • SHA512

      328a18b8451b806065f337055ed0da923cdf00065d24f312620bfa6a0bf60697295b5402edb4701570155506430d8afa24a60c6490c4063e41784e177fb27494

    • SSDEEP

      768:2geZ5QeklJQ35pPRuIkUD1sYAQ/TN71N1adOZSHj9jaSCpOzIi7D8kUUUNUEwDj:heZqP25TuIfmS7Fv1aUZSD9yiIHaX

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks