General

  • Target

    88fa590df4030e28590a4b542faeac7165d0c54a6f7fc7d0bd62341c5c60ec94.exe

  • Size

    68KB

  • Sample

    250125-b87twa1kak

  • MD5

    8b5e9d3f1d95501f2dc371e77765f297

  • SHA1

    3677bd1125433a3427bb4a4e83fb32aaf98fa445

  • SHA256

    88fa590df4030e28590a4b542faeac7165d0c54a6f7fc7d0bd62341c5c60ec94

  • SHA512

    83a5fe4382c4d6224a5e8ebc8c7005fb3a6f0f889d56f8c51801ef308155b752c49a29323ddf7d2ed8b45a7413876c2a2b9509ec9797c4dfe735a6c9ec2e9fbb

  • SSDEEP

    1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCare:yLAYUzmdD0sMQl7d7IuhCaq

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      88fa590df4030e28590a4b542faeac7165d0c54a6f7fc7d0bd62341c5c60ec94.exe

    • Size

      68KB

    • MD5

      8b5e9d3f1d95501f2dc371e77765f297

    • SHA1

      3677bd1125433a3427bb4a4e83fb32aaf98fa445

    • SHA256

      88fa590df4030e28590a4b542faeac7165d0c54a6f7fc7d0bd62341c5c60ec94

    • SHA512

      83a5fe4382c4d6224a5e8ebc8c7005fb3a6f0f889d56f8c51801ef308155b752c49a29323ddf7d2ed8b45a7413876c2a2b9509ec9797c4dfe735a6c9ec2e9fbb

    • SSDEEP

      1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCare:yLAYUzmdD0sMQl7d7IuhCaq

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks