General

  • Target

    3bb9730d1ef76efb2a9d2b60e67b0d55a126bc487a77f339d7503c30f63b0cf2N.exe

  • Size

    138KB

  • Sample

    250201-syg9xayjgs

  • MD5

    6490cbf8f2cbdc24b11a678920398c10

  • SHA1

    b2c744cd46c377932eb1d17c7dd76c9cbc40a207

  • SHA256

    3bb9730d1ef76efb2a9d2b60e67b0d55a126bc487a77f339d7503c30f63b0cf2

  • SHA512

    e5857ead1c45f51d67678b22b599e43c03df8728ef2e9907441b964a6faa08961ba25132e8a03cc60a2e568cbb653339bd2dcc2a84903d62f9d0f09db3a5a12d

  • SSDEEP

    1536:7GnrJLwAXDtIBcUyk+8CooNvy3GNbcq7+sWjcdmx64Tc/qmrk:CtpCP+/oGvWSldmx64Tc/qmA

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      3bb9730d1ef76efb2a9d2b60e67b0d55a126bc487a77f339d7503c30f63b0cf2N.exe

    • Size

      138KB

    • MD5

      6490cbf8f2cbdc24b11a678920398c10

    • SHA1

      b2c744cd46c377932eb1d17c7dd76c9cbc40a207

    • SHA256

      3bb9730d1ef76efb2a9d2b60e67b0d55a126bc487a77f339d7503c30f63b0cf2

    • SHA512

      e5857ead1c45f51d67678b22b599e43c03df8728ef2e9907441b964a6faa08961ba25132e8a03cc60a2e568cbb653339bd2dcc2a84903d62f9d0f09db3a5a12d

    • SSDEEP

      1536:7GnrJLwAXDtIBcUyk+8CooNvy3GNbcq7+sWjcdmx64Tc/qmrk:CtpCP+/oGvWSldmx64Tc/qmA

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks