General

  • Target

    9e99c8754d40a65b0b5f6c0691209dc8eb10de70614ae6b043624eed52260199.exe

  • Size

    78KB

  • Sample

    250202-h9tf7stlek

  • MD5

    e4ec962e39ab93eb8986a7052b6769ad

  • SHA1

    1c9486fb619b56e64f9641ab41e4633851d6c398

  • SHA256

    9e99c8754d40a65b0b5f6c0691209dc8eb10de70614ae6b043624eed52260199

  • SHA512

    2570d1e3d577f5a7e0ae2552c65d1e731a462cb8ef99823758ef23ac9d859da2a493e0316d91aa563eaab8d7175dce21d849a6c8e28c5679c2b939050af8df41

  • SSDEEP

    1536:Zfhb7GkpDbdVIoCyWW9T9oNpiS0o3SKZREpKn:PPNdbdOopN5YpiK7n

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.28.139

121.88.5.183

Targets

    • Target

      9e99c8754d40a65b0b5f6c0691209dc8eb10de70614ae6b043624eed52260199.exe

    • Size

      78KB

    • MD5

      e4ec962e39ab93eb8986a7052b6769ad

    • SHA1

      1c9486fb619b56e64f9641ab41e4633851d6c398

    • SHA256

      9e99c8754d40a65b0b5f6c0691209dc8eb10de70614ae6b043624eed52260199

    • SHA512

      2570d1e3d577f5a7e0ae2552c65d1e731a462cb8ef99823758ef23ac9d859da2a493e0316d91aa563eaab8d7175dce21d849a6c8e28c5679c2b939050af8df41

    • SSDEEP

      1536:Zfhb7GkpDbdVIoCyWW9T9oNpiS0o3SKZREpKn:PPNdbdOopN5YpiK7n

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks