General

  • Target

    1541622e3a6daa44def2d6cfc916541c03abd8728ee9a6efca45777878661dac.exe

  • Size

    78KB

  • Sample

    250201-xcrnnsxjgm

  • MD5

    9c4eae1162b7851bbc0b2ebfe5dd98be

  • SHA1

    e454a676c8ee716857a030fbce1c206c4af5f157

  • SHA256

    1541622e3a6daa44def2d6cfc916541c03abd8728ee9a6efca45777878661dac

  • SHA512

    f38332a38ff54f68209a0a1b6bc4d9224d2b1ef8aa58929ee468b5f44e0a231979b06b289e9ab5e27f3b536be640f708d8cee0e61ee582253259de2f277dcfb1

  • SSDEEP

    768:xZU9HZe4JZxPKAgmmE2jmXwTcxlhshya4qCIDWObp2EfoiSCMy6MuHg/wrYaFRdX:xce4ZKAvTwTcshJDzo9LHyUYmdGT/4

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      1541622e3a6daa44def2d6cfc916541c03abd8728ee9a6efca45777878661dac.exe

    • Size

      78KB

    • MD5

      9c4eae1162b7851bbc0b2ebfe5dd98be

    • SHA1

      e454a676c8ee716857a030fbce1c206c4af5f157

    • SHA256

      1541622e3a6daa44def2d6cfc916541c03abd8728ee9a6efca45777878661dac

    • SHA512

      f38332a38ff54f68209a0a1b6bc4d9224d2b1ef8aa58929ee468b5f44e0a231979b06b289e9ab5e27f3b536be640f708d8cee0e61ee582253259de2f277dcfb1

    • SSDEEP

      768:xZU9HZe4JZxPKAgmmE2jmXwTcxlhshya4qCIDWObp2EfoiSCMy6MuHg/wrYaFRdX:xce4ZKAvTwTcshJDzo9LHyUYmdGT/4

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks