General

  • Target

    09d0706acfd7a5ecaca5bd7301b4d9e6d38ec911718332b690c7fa881d3f7319N.exe

  • Size

    92KB

  • Sample

    250124-fr516ssnfm

  • MD5

    952f9dce75e7497dd22af53f225728f0

  • SHA1

    9619bc7e90c71bf0978a64d4fe17b164526adb40

  • SHA256

    09d0706acfd7a5ecaca5bd7301b4d9e6d38ec911718332b690c7fa881d3f7319

  • SHA512

    0405653450806eb6c12f7cc667370cd61bd33441f7989314bba71f3efaac8ac6c829ce98170aba48fa291bdbc69785d0ffb12d6d0dbd913fee41c39e96ae7d51

  • SSDEEP

    1536:iDJj/L6UWX/iDdolO4g033dsA2+n1qn1iLdB:iDJj29G4gItR7n1qn4Ld

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.77

218.54.47.74

Targets

    • Target

      09d0706acfd7a5ecaca5bd7301b4d9e6d38ec911718332b690c7fa881d3f7319N.exe

    • Size

      92KB

    • MD5

      952f9dce75e7497dd22af53f225728f0

    • SHA1

      9619bc7e90c71bf0978a64d4fe17b164526adb40

    • SHA256

      09d0706acfd7a5ecaca5bd7301b4d9e6d38ec911718332b690c7fa881d3f7319

    • SHA512

      0405653450806eb6c12f7cc667370cd61bd33441f7989314bba71f3efaac8ac6c829ce98170aba48fa291bdbc69785d0ffb12d6d0dbd913fee41c39e96ae7d51

    • SSDEEP

      1536:iDJj/L6UWX/iDdolO4g033dsA2+n1qn1iLdB:iDJj29G4gItR7n1qn4Ld

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks