General

  • Target

    9ac0c3b480a8ff5e9818883f120c6d881dd1ad074258edb253195873da84624c.exe

  • Size

    59KB

  • Sample

    250205-qmskdsxqb1

  • MD5

    4ae31044ec0012a79e3beef6ae9daf73

  • SHA1

    a8843f037f71c2e52d339a36e683c579b91daf65

  • SHA256

    9ac0c3b480a8ff5e9818883f120c6d881dd1ad074258edb253195873da84624c

  • SHA512

    3bde9a175711022a2e7fc836f7a19bc165092f6614659bb72a960a044aa36e40bb0a2545360673c223951ff063953441b15bad2daeb450272ab565ee87b6c054

  • SSDEEP

    768:jb4zb59Yix/RoyH+5flZirYqc97vFvrpaZG3DHvTdA9GgnOuS5Z3WXcKIZx5uDn:jbQx5oPsr2vFxDPhAvzgdWLIZ7yn

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      9ac0c3b480a8ff5e9818883f120c6d881dd1ad074258edb253195873da84624c.exe

    • Size

      59KB

    • MD5

      4ae31044ec0012a79e3beef6ae9daf73

    • SHA1

      a8843f037f71c2e52d339a36e683c579b91daf65

    • SHA256

      9ac0c3b480a8ff5e9818883f120c6d881dd1ad074258edb253195873da84624c

    • SHA512

      3bde9a175711022a2e7fc836f7a19bc165092f6614659bb72a960a044aa36e40bb0a2545360673c223951ff063953441b15bad2daeb450272ab565ee87b6c054

    • SSDEEP

      768:jb4zb59Yix/RoyH+5flZirYqc97vFvrpaZG3DHvTdA9GgnOuS5Z3WXcKIZx5uDn:jbQx5oPsr2vFxDPhAvzgdWLIZ7yn

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks