General

  • Target

    4d9947f580ce0254f3197e05a8247eaab30183ad8b292e6a16fb64701c9c77a9N.exe

  • Size

    629KB

  • Sample

    250202-cw118s1mex

  • MD5

    2636e72056b9ee9495548eb46a3a93d0

  • SHA1

    9b5cda0964ceb190487911bab16225d5a4ee63bf

  • SHA256

    4d9947f580ce0254f3197e05a8247eaab30183ad8b292e6a16fb64701c9c77a9

  • SHA512

    13b78f3360b657e0096e2c1e7b49e23d0a3470f4a04cb4a84a65ac3977a329e76751a3d7604ac4c0f9610036f124516315fe4d26a0ebdd57ead4672baa24066e

  • SSDEEP

    6144:hmbmLppYOuakY1q5Q4XMxvQ4x1OpGcm9VQl0lM/oJ4/gupe10b:hma6id1Q8zzkGHVqoq/gI

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

Targets

    • Target

      4d9947f580ce0254f3197e05a8247eaab30183ad8b292e6a16fb64701c9c77a9N.exe

    • Size

      629KB

    • MD5

      2636e72056b9ee9495548eb46a3a93d0

    • SHA1

      9b5cda0964ceb190487911bab16225d5a4ee63bf

    • SHA256

      4d9947f580ce0254f3197e05a8247eaab30183ad8b292e6a16fb64701c9c77a9

    • SHA512

      13b78f3360b657e0096e2c1e7b49e23d0a3470f4a04cb4a84a65ac3977a329e76751a3d7604ac4c0f9610036f124516315fe4d26a0ebdd57ead4672baa24066e

    • SSDEEP

      6144:hmbmLppYOuakY1q5Q4XMxvQ4x1OpGcm9VQl0lM/oJ4/gupe10b:hma6id1Q8zzkGHVqoq/gI

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks