General

  • Target

    ece94b4e16e8b3b5423363d9340018f02d1b2cb837109def6ef2f838d99585c6N.exe

  • Size

    335KB

  • Sample

    250123-e71kystncp

  • MD5

    28b8654544104c69057653f470567020

  • SHA1

    75c7d9aaf9238f5ea4a74e8a021380479b3db10f

  • SHA256

    ece94b4e16e8b3b5423363d9340018f02d1b2cb837109def6ef2f838d99585c6

  • SHA512

    87c67b343f56522958ba1f539f07ae4b403655f99beccafeb7cf03a6f1b540f18a0ea2941607029468fd1e6e81b2cdf3d63d3103aa25b6225d4fbca5ee7dbbd1

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIrN:vHW138/iXWlK885rKlGSekcj66ciz

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      ece94b4e16e8b3b5423363d9340018f02d1b2cb837109def6ef2f838d99585c6N.exe

    • Size

      335KB

    • MD5

      28b8654544104c69057653f470567020

    • SHA1

      75c7d9aaf9238f5ea4a74e8a021380479b3db10f

    • SHA256

      ece94b4e16e8b3b5423363d9340018f02d1b2cb837109def6ef2f838d99585c6

    • SHA512

      87c67b343f56522958ba1f539f07ae4b403655f99beccafeb7cf03a6f1b540f18a0ea2941607029468fd1e6e81b2cdf3d63d3103aa25b6225d4fbca5ee7dbbd1

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIrN:vHW138/iXWlK885rKlGSekcj66ciz

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks