General

  • Target

    106a93d92afba2835a8d35b6b8477dc618e300a552dec4e12c6edc34794280b0.exe

  • Size

    336KB

  • Sample

    250122-eadpxsxkgq

  • MD5

    184521dc985f9347420decd07ebb3d1a

  • SHA1

    a97891c7a46cc0cc8e88a8d60ef4c7b91044d136

  • SHA256

    106a93d92afba2835a8d35b6b8477dc618e300a552dec4e12c6edc34794280b0

  • SHA512

    0c5b90441faf0057e8016f6dc696acd7860eb0cf7884f110299cf7727a249588a5cf7bbb76c2633113521acc71956e449eb07cf8cc52f54eae5831d4537a9d93

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcKv:vHW138/iXWlK885rKlGSekcj66ci3

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      106a93d92afba2835a8d35b6b8477dc618e300a552dec4e12c6edc34794280b0.exe

    • Size

      336KB

    • MD5

      184521dc985f9347420decd07ebb3d1a

    • SHA1

      a97891c7a46cc0cc8e88a8d60ef4c7b91044d136

    • SHA256

      106a93d92afba2835a8d35b6b8477dc618e300a552dec4e12c6edc34794280b0

    • SHA512

      0c5b90441faf0057e8016f6dc696acd7860eb0cf7884f110299cf7727a249588a5cf7bbb76c2633113521acc71956e449eb07cf8cc52f54eae5831d4537a9d93

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcKv:vHW138/iXWlK885rKlGSekcj66ci3

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks