General

  • Target

    cee1bc86eb71016a79efd8e4976214628ff7e37ede143c5c2be86dc4e7a79ee2N.exe

  • Size

    336KB

  • Sample

    250122-lzzr1s1jds

  • MD5

    900e3c4800edb1517eb5ab6b4d66ae20

  • SHA1

    ab87969f9b60e8247657d83e4a961206cac9ca5f

  • SHA256

    cee1bc86eb71016a79efd8e4976214628ff7e37ede143c5c2be86dc4e7a79ee2

  • SHA512

    74989e01fd82f76b31e040757227a73c671f14abeb6317505d65ab84e9d45afc07bfa4d1079f174b31f9f5b66fa712371d20a6376c7a2d9718dc73fddb0078c0

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcKD:vHW138/iXWlK885rKlGSekcj66cib

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      cee1bc86eb71016a79efd8e4976214628ff7e37ede143c5c2be86dc4e7a79ee2N.exe

    • Size

      336KB

    • MD5

      900e3c4800edb1517eb5ab6b4d66ae20

    • SHA1

      ab87969f9b60e8247657d83e4a961206cac9ca5f

    • SHA256

      cee1bc86eb71016a79efd8e4976214628ff7e37ede143c5c2be86dc4e7a79ee2

    • SHA512

      74989e01fd82f76b31e040757227a73c671f14abeb6317505d65ab84e9d45afc07bfa4d1079f174b31f9f5b66fa712371d20a6376c7a2d9718dc73fddb0078c0

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcKD:vHW138/iXWlK885rKlGSekcj66cib

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks