General

  • Target

    a8e4e0bb97c958113dbd83995125ab7dfb100c515a06ab0350bddbdcea269c1dN.exe

  • Size

    69KB

  • Sample

    250124-145w6a1nes

  • MD5

    caae391ec47a6ae99c4a7fafe6187a70

  • SHA1

    f118986a2b3c37f3c7c9505fd74fdffc1d10e00a

  • SHA256

    a8e4e0bb97c958113dbd83995125ab7dfb100c515a06ab0350bddbdcea269c1d

  • SHA512

    b88d471c241ac2ac0ab97ac1267e87aa1a96501b950b4bdd7429aff70cac808a839c4b4d94b2b6cb403845f3abc28d601c8e86386549cd9ef4a7dd49db1e45a0

  • SSDEEP

    1536:04/WgLAjdZsp+uChoLnDeoqYAJjvLFymnHsPeOti:l//AjMp+u2onejH2Peh

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      a8e4e0bb97c958113dbd83995125ab7dfb100c515a06ab0350bddbdcea269c1dN.exe

    • Size

      69KB

    • MD5

      caae391ec47a6ae99c4a7fafe6187a70

    • SHA1

      f118986a2b3c37f3c7c9505fd74fdffc1d10e00a

    • SHA256

      a8e4e0bb97c958113dbd83995125ab7dfb100c515a06ab0350bddbdcea269c1d

    • SHA512

      b88d471c241ac2ac0ab97ac1267e87aa1a96501b950b4bdd7429aff70cac808a839c4b4d94b2b6cb403845f3abc28d601c8e86386549cd9ef4a7dd49db1e45a0

    • SSDEEP

      1536:04/WgLAjdZsp+uChoLnDeoqYAJjvLFymnHsPeOti:l//AjMp+u2onejH2Peh

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks