General

  • Target

    5d955dfde505098ff8f2a0c997ac247abe2019c4a3fb6f153abe987e66cc2188.exe

  • Size

    69KB

  • Sample

    250124-mcbmcavlfr

  • MD5

    64dc3774ba828df8f54fff270cfb1f26

  • SHA1

    33a3bfab1e03c1d11d0842105ea176df96b4d1de

  • SHA256

    5d955dfde505098ff8f2a0c997ac247abe2019c4a3fb6f153abe987e66cc2188

  • SHA512

    b8ed25d6b58caa95acf9f2e7c64f5420f758b6fdeb88a25f14bd6e891688c4b336c1078aa5b80469ec7bdc61b26e341c679a60c650f89de5c6e3b51d6b70b4a2

  • SSDEEP

    1536:04/WgLAjdZsp+uChoLnDeoqYAJjvLFymnHsPeOtG:l//AjMp+u2onejH2PeL

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      5d955dfde505098ff8f2a0c997ac247abe2019c4a3fb6f153abe987e66cc2188.exe

    • Size

      69KB

    • MD5

      64dc3774ba828df8f54fff270cfb1f26

    • SHA1

      33a3bfab1e03c1d11d0842105ea176df96b4d1de

    • SHA256

      5d955dfde505098ff8f2a0c997ac247abe2019c4a3fb6f153abe987e66cc2188

    • SHA512

      b8ed25d6b58caa95acf9f2e7c64f5420f758b6fdeb88a25f14bd6e891688c4b336c1078aa5b80469ec7bdc61b26e341c679a60c650f89de5c6e3b51d6b70b4a2

    • SSDEEP

      1536:04/WgLAjdZsp+uChoLnDeoqYAJjvLFymnHsPeOtG:l//AjMp+u2onejH2PeL

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks