General

  • Target

    a8d0b692500c8214020385b27086b0dab3548756a01e348117f83c6e7d2e269b.exe

  • Size

    56KB

  • Sample

    250207-3kkg8avlcr

  • MD5

    0ca914b7d1899e4fdd4562337b0c3ffe

  • SHA1

    bff97fece966f865b1fc436f7c66ed14b53abfa0

  • SHA256

    a8d0b692500c8214020385b27086b0dab3548756a01e348117f83c6e7d2e269b

  • SHA512

    07a253cbef1889a42ae914528f2c3b223a454b103f26ca57dd53a2da28533b53fbc88165523bbc3635ef06cb5f8fabc053f63a18830a44376d93155171ba3170

  • SSDEEP

    768:OFzZyc8/WgdkRgce6VDpld8uspLqu+X/sqXnDwJb9FZBrXiDgRpzo1YA0ponrPXe:04/WgLAjdZsp+uChoLnDeoqYAJjK9

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      a8d0b692500c8214020385b27086b0dab3548756a01e348117f83c6e7d2e269b.exe

    • Size

      56KB

    • MD5

      0ca914b7d1899e4fdd4562337b0c3ffe

    • SHA1

      bff97fece966f865b1fc436f7c66ed14b53abfa0

    • SHA256

      a8d0b692500c8214020385b27086b0dab3548756a01e348117f83c6e7d2e269b

    • SHA512

      07a253cbef1889a42ae914528f2c3b223a454b103f26ca57dd53a2da28533b53fbc88165523bbc3635ef06cb5f8fabc053f63a18830a44376d93155171ba3170

    • SSDEEP

      768:OFzZyc8/WgdkRgce6VDpld8uspLqu+X/sqXnDwJb9FZBrXiDgRpzo1YA0ponrPXe:04/WgLAjdZsp+uChoLnDeoqYAJjK9

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks