General

  • Target

    58947f946837913bea9024f5104557ae5ee5119f52a277bb4756260906b8ef96N.exe

  • Size

    335KB

  • Sample

    250124-g5m8yswjfn

  • MD5

    f52d3281e69ae3ddbebd9a491f2e4510

  • SHA1

    0cef681704c8587ef790d9912b2ee5050af93ca4

  • SHA256

    58947f946837913bea9024f5104557ae5ee5119f52a277bb4756260906b8ef96

  • SHA512

    110deb3bbd9419f80df41a351a51072c7db02060c6ff9be197291a5494c50fa20b97fbe0ac4c7884f6aa9f9865bb2481d99a03bc80e4c5182fbfe9361453423d

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIc8:vHW138/iXWlK885rKlGSekcj66ci/

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      58947f946837913bea9024f5104557ae5ee5119f52a277bb4756260906b8ef96N.exe

    • Size

      335KB

    • MD5

      f52d3281e69ae3ddbebd9a491f2e4510

    • SHA1

      0cef681704c8587ef790d9912b2ee5050af93ca4

    • SHA256

      58947f946837913bea9024f5104557ae5ee5119f52a277bb4756260906b8ef96

    • SHA512

      110deb3bbd9419f80df41a351a51072c7db02060c6ff9be197291a5494c50fa20b97fbe0ac4c7884f6aa9f9865bb2481d99a03bc80e4c5182fbfe9361453423d

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIc8:vHW138/iXWlK885rKlGSekcj66ci/

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks