General

  • Target

    1349c2e9afb18cd283d583d7a7b12be64fc8c50b777e88961c851ee535b7da60.exe

  • Size

    337KB

  • Sample

    250124-ebenlsxqhx

  • MD5

    e6b76480839da7c11075198a296521db

  • SHA1

    16ea461d8ccd09bda7f9535d24448bc46d897425

  • SHA256

    1349c2e9afb18cd283d583d7a7b12be64fc8c50b777e88961c851ee535b7da60

  • SHA512

    3f0a99d13b9a77f0570f45c9be72c0e52ae34101de65924ee6091e2df8238c1e9e433453569b17ed8caa142fb603c3c163574a9f19063b0793a56665dc4fc440

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcKCM:vHW138/iXWlK885rKlGSekcj66ciZ

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      1349c2e9afb18cd283d583d7a7b12be64fc8c50b777e88961c851ee535b7da60.exe

    • Size

      337KB

    • MD5

      e6b76480839da7c11075198a296521db

    • SHA1

      16ea461d8ccd09bda7f9535d24448bc46d897425

    • SHA256

      1349c2e9afb18cd283d583d7a7b12be64fc8c50b777e88961c851ee535b7da60

    • SHA512

      3f0a99d13b9a77f0570f45c9be72c0e52ae34101de65924ee6091e2df8238c1e9e433453569b17ed8caa142fb603c3c163574a9f19063b0793a56665dc4fc440

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcKCM:vHW138/iXWlK885rKlGSekcj66ciZ

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks