General

  • Target

    c54bde19a8f05f8f5a4914f30df8c1f6bf9e3d6ca01804ad3a52ac02ca69160f.exe

  • Size

    68KB

  • Sample

    250122-pak44svrax

  • MD5

    6dfe25a15012dbd95fbc45ec80f7b975

  • SHA1

    92f370c5832610a2de6028af204c1b65ca14efee

  • SHA256

    c54bde19a8f05f8f5a4914f30df8c1f6bf9e3d6ca01804ad3a52ac02ca69160f

  • SHA512

    a5acdf162d7a3d0dba545cb44d701e551bc4f9f8530b924b85b55882cff58136e9cbe48899236a04bb177dc0bfbaa8f7bb87b7e40af458f7ea00a25288202ed4

  • SSDEEP

    1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCarH:yLAYUzmdD0sMQl7d7IuhCaD

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      c54bde19a8f05f8f5a4914f30df8c1f6bf9e3d6ca01804ad3a52ac02ca69160f.exe

    • Size

      68KB

    • MD5

      6dfe25a15012dbd95fbc45ec80f7b975

    • SHA1

      92f370c5832610a2de6028af204c1b65ca14efee

    • SHA256

      c54bde19a8f05f8f5a4914f30df8c1f6bf9e3d6ca01804ad3a52ac02ca69160f

    • SHA512

      a5acdf162d7a3d0dba545cb44d701e551bc4f9f8530b924b85b55882cff58136e9cbe48899236a04bb177dc0bfbaa8f7bb87b7e40af458f7ea00a25288202ed4

    • SSDEEP

      1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCarH:yLAYUzmdD0sMQl7d7IuhCaD

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks