General

  • Target

    5085669c7ebe8a60cd39dbe9c8d10d1d2d1aa370f635d4461636bf5a47114881N.exe

  • Size

    94KB

  • Sample

    250125-jhpvdatrfk

  • MD5

    9647fefa1bd11c353e52678626ecd180

  • SHA1

    55d857d317b611fa82fa9fa3b071cf49452cac80

  • SHA256

    5085669c7ebe8a60cd39dbe9c8d10d1d2d1aa370f635d4461636bf5a47114881

  • SHA512

    5c4e402ae12d26aa0d4a0ed9e51f656398765f56cfd77e2e2bd4696a910f447ac5c9e4f59bc8862b245480f5ed6d1c987920aa2ddf47ed0c9869733b8e5826ed

  • SSDEEP

    768:tp0ti4HnnhtwYbJy6rioyelmd1TzulQEDDPOwc5n5uNCT/jhhLBxQIwqepJZU9mO:tWzhtJbUgHoADDIx1hLfuJrO

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      5085669c7ebe8a60cd39dbe9c8d10d1d2d1aa370f635d4461636bf5a47114881N.exe

    • Size

      94KB

    • MD5

      9647fefa1bd11c353e52678626ecd180

    • SHA1

      55d857d317b611fa82fa9fa3b071cf49452cac80

    • SHA256

      5085669c7ebe8a60cd39dbe9c8d10d1d2d1aa370f635d4461636bf5a47114881

    • SHA512

      5c4e402ae12d26aa0d4a0ed9e51f656398765f56cfd77e2e2bd4696a910f447ac5c9e4f59bc8862b245480f5ed6d1c987920aa2ddf47ed0c9869733b8e5826ed

    • SSDEEP

      768:tp0ti4HnnhtwYbJy6rioyelmd1TzulQEDDPOwc5n5uNCT/jhhLBxQIwqepJZU9mO:tWzhtJbUgHoADDIx1hLfuJrO

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks