General

  • Target

    dbe5cea0d34cfdcad6cdb6f75900bc8e82751b17372d464f5f2ff446b6d245e8N.exe

  • Size

    336KB

  • Sample

    250122-edvgvawrgs

  • MD5

    e29710494d400a64651a10de4fd82fe0

  • SHA1

    21dd2c7eee2fb406b1078ee2df2bde1094713022

  • SHA256

    dbe5cea0d34cfdcad6cdb6f75900bc8e82751b17372d464f5f2ff446b6d245e8

  • SHA512

    244dd69cb51333474809d322b97e0afb5b90736ada760ecd6fef838eb97c6cabc94dc7d686e4538ba9ba067f33664be95e968dfd3c10a74aae1201debb1cfe66

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcKN:vHW138/iXWlK885rKlGSekcj66cil

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      dbe5cea0d34cfdcad6cdb6f75900bc8e82751b17372d464f5f2ff446b6d245e8N.exe

    • Size

      336KB

    • MD5

      e29710494d400a64651a10de4fd82fe0

    • SHA1

      21dd2c7eee2fb406b1078ee2df2bde1094713022

    • SHA256

      dbe5cea0d34cfdcad6cdb6f75900bc8e82751b17372d464f5f2ff446b6d245e8

    • SHA512

      244dd69cb51333474809d322b97e0afb5b90736ada760ecd6fef838eb97c6cabc94dc7d686e4538ba9ba067f33664be95e968dfd3c10a74aae1201debb1cfe66

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcKN:vHW138/iXWlK885rKlGSekcj66cil

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks