General

  • Target

    62d08e249c0fef8fc441be25a766b65169416db8f6e2f2c04294e1f80ce458bc.exe

  • Size

    69KB

  • Sample

    250202-r5n6cswley

  • MD5

    50a4b911d2417f81244ca66624403943

  • SHA1

    86406aa5887e2c50fee0735d5035168c76259e45

  • SHA256

    62d08e249c0fef8fc441be25a766b65169416db8f6e2f2c04294e1f80ce458bc

  • SHA512

    b8a2aa245fce67dfe6c6d96652c4d482d0b5520c4d9d82954d0718f3c2870754d304ab1766ca3528613ccbaf5ed01ce5db427d1ce9029a53588499af20835cbd

  • SSDEEP

    1536:04/WgLAjdZsp+uChoLnDeoqYAJjvLFymnHsPeOtz:l//AjMp+u2onejH2Pe+

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      62d08e249c0fef8fc441be25a766b65169416db8f6e2f2c04294e1f80ce458bc.exe

    • Size

      69KB

    • MD5

      50a4b911d2417f81244ca66624403943

    • SHA1

      86406aa5887e2c50fee0735d5035168c76259e45

    • SHA256

      62d08e249c0fef8fc441be25a766b65169416db8f6e2f2c04294e1f80ce458bc

    • SHA512

      b8a2aa245fce67dfe6c6d96652c4d482d0b5520c4d9d82954d0718f3c2870754d304ab1766ca3528613ccbaf5ed01ce5db427d1ce9029a53588499af20835cbd

    • SSDEEP

      1536:04/WgLAjdZsp+uChoLnDeoqYAJjvLFymnHsPeOtz:l//AjMp+u2onejH2Pe+

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks