General

  • Target

    1e8bc4c25071312e00e5480469700b34e8c661ff860aee6cb228c35507f6ddefN.exe

  • Size

    336KB

  • Sample

    250124-px1hbayndw

  • MD5

    63112463c8d44d312cded96e7f033800

  • SHA1

    f48c48882f0d5348f6e99a27599efbaf5e80d9e1

  • SHA256

    1e8bc4c25071312e00e5480469700b34e8c661ff860aee6cb228c35507f6ddef

  • SHA512

    f514ec1c8070105d5cfdc38249bec80689d18405004e55b8431c3eec1c52c1e5bd4ff7a94d109b15b66c30765c442f9442a6cfcf857830d7f2275086edc7e309

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIrE:vHW138/iXWlK885rKlGSekcj66ci+

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      1e8bc4c25071312e00e5480469700b34e8c661ff860aee6cb228c35507f6ddefN.exe

    • Size

      336KB

    • MD5

      63112463c8d44d312cded96e7f033800

    • SHA1

      f48c48882f0d5348f6e99a27599efbaf5e80d9e1

    • SHA256

      1e8bc4c25071312e00e5480469700b34e8c661ff860aee6cb228c35507f6ddef

    • SHA512

      f514ec1c8070105d5cfdc38249bec80689d18405004e55b8431c3eec1c52c1e5bd4ff7a94d109b15b66c30765c442f9442a6cfcf857830d7f2275086edc7e309

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIrE:vHW138/iXWlK885rKlGSekcj66ci+

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks