General

  • Target

    77b779a9aa50c0351a69bbb94a1fd392357ee2449fd9233d8751e3eec54b8b09.exe

  • Size

    438KB

  • Sample

    250123-dxep3azkes

  • MD5

    b40e208afec48c1c8d1e41e87d015453

  • SHA1

    56fedd2c3fa4b49bd550ef362180e8d7a26b334f

  • SHA256

    77b779a9aa50c0351a69bbb94a1fd392357ee2449fd9233d8751e3eec54b8b09

  • SHA512

    f104219b752306fe690607f2d123dd2d1604d6b36257eaebe58696bbd2beb2454b32b20c7779ce2a24af083ec2cc1744fe3e53323448430e39d88be9ffed0316

  • SSDEEP

    6144:oo3wBi+1Py3V0a2WkRNgi3caOHO5NjEwwiYWB5mV4Pzw9ygibGGMM2:rKf1PyKa2H3hOHOHz9JQ6zB8

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.165

218.54.31.226

Targets

    • Target

      77b779a9aa50c0351a69bbb94a1fd392357ee2449fd9233d8751e3eec54b8b09.exe

    • Size

      438KB

    • MD5

      b40e208afec48c1c8d1e41e87d015453

    • SHA1

      56fedd2c3fa4b49bd550ef362180e8d7a26b334f

    • SHA256

      77b779a9aa50c0351a69bbb94a1fd392357ee2449fd9233d8751e3eec54b8b09

    • SHA512

      f104219b752306fe690607f2d123dd2d1604d6b36257eaebe58696bbd2beb2454b32b20c7779ce2a24af083ec2cc1744fe3e53323448430e39d88be9ffed0316

    • SSDEEP

      6144:oo3wBi+1Py3V0a2WkRNgi3caOHO5NjEwwiYWB5mV4Pzw9ygibGGMM2:rKf1PyKa2H3hOHOHz9JQ6zB8

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks