General

  • Target

    42a51a26f5d4e9959db0b228fe7a17247f8572902056814d7fc09e93229bf098.exe

  • Size

    59KB

  • Sample

    250124-s1ddqswrfq

  • MD5

    36f26fcaae5cf8d3aa97fe7cf9f0b633

  • SHA1

    d80e1ac4b25d6e1ea8b961fd5f2ec8438356bfef

  • SHA256

    42a51a26f5d4e9959db0b228fe7a17247f8572902056814d7fc09e93229bf098

  • SHA512

    f88cff7f310671a9f6efd3047b9652918cafa3d2923a067c574c15f3d753e42951f9870d8f4a9216354a29096acd01bcc27568a16fc882a92de7b90426afbda5

  • SSDEEP

    768:jb4zb59Yix/RoyH+5flZirYqc97vFvrpaZG3DHvTdA9GgnOuS5Z3WXcKIZx5uDZ:jbQx5oPsr2vFxDPhAvzgdWLIZ7yZ

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      42a51a26f5d4e9959db0b228fe7a17247f8572902056814d7fc09e93229bf098.exe

    • Size

      59KB

    • MD5

      36f26fcaae5cf8d3aa97fe7cf9f0b633

    • SHA1

      d80e1ac4b25d6e1ea8b961fd5f2ec8438356bfef

    • SHA256

      42a51a26f5d4e9959db0b228fe7a17247f8572902056814d7fc09e93229bf098

    • SHA512

      f88cff7f310671a9f6efd3047b9652918cafa3d2923a067c574c15f3d753e42951f9870d8f4a9216354a29096acd01bcc27568a16fc882a92de7b90426afbda5

    • SSDEEP

      768:jb4zb59Yix/RoyH+5flZirYqc97vFvrpaZG3DHvTdA9GgnOuS5Z3WXcKIZx5uDZ:jbQx5oPsr2vFxDPhAvzgdWLIZ7yZ

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks