General

  • Target

    f368d0cbd9ce95eb9e133d761222461be509513e28ed5eea600844bbba5904a2N.exe

  • Size

    75KB

  • Sample

    250212-t8q58sznbv

  • MD5

    7015f3bc0a7664f85ff31387f5c654a0

  • SHA1

    50c7dae5554e0fcede01f4a96695f7e5ab835763

  • SHA256

    f368d0cbd9ce95eb9e133d761222461be509513e28ed5eea600844bbba5904a2

  • SHA512

    bde6bd2d654b710a3ecf6a06832b00c1ff7b760964633018ef7490c2f6dad9e12004ea3ae881ea8acd710e76929fa80dc73c9abdbdf65c0689fa8cd41882b242

  • SSDEEP

    1536:JBsRUZ2mpkX27tLUgk98l6h0JBDrDI6Rg4dOE:7NXkX27t5k8JRDIkgI

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.208

112.175.88.207

Targets

    • Target

      f368d0cbd9ce95eb9e133d761222461be509513e28ed5eea600844bbba5904a2N.exe

    • Size

      75KB

    • MD5

      7015f3bc0a7664f85ff31387f5c654a0

    • SHA1

      50c7dae5554e0fcede01f4a96695f7e5ab835763

    • SHA256

      f368d0cbd9ce95eb9e133d761222461be509513e28ed5eea600844bbba5904a2

    • SHA512

      bde6bd2d654b710a3ecf6a06832b00c1ff7b760964633018ef7490c2f6dad9e12004ea3ae881ea8acd710e76929fa80dc73c9abdbdf65c0689fa8cd41882b242

    • SSDEEP

      1536:JBsRUZ2mpkX27tLUgk98l6h0JBDrDI6Rg4dOE:7NXkX27t5k8JRDIkgI

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks