General

  • Target

    0bf5f3c1f48917dfd51c9e6e662dbdcf

  • Size

    782KB

  • Sample

    231219-mtwnvafagn

  • MD5

    0bf5f3c1f48917dfd51c9e6e662dbdcf

  • SHA1

    0dece3a9762f60c8b326bd5800cb9d54555b58d5

  • SHA256

    d8be9d9de7092b85a892a31146662759a7f2714e246c2cf1700ae48c9c4c4870

  • SHA512

    12904b98247451e63aadf9195b547d5605c55a17d1ffb01250bec171844ecc629da26568cc7580a814be04c13b30a0682cd63333e15b342748eba222f74d588b

  • SSDEEP

    12288:YOlx4kk9HKda4YfM/1T3PPSnPI2VAWNDTJHq9DIMTW8c1V:YA4Ya1fQzPPSnPFqWtTJK9DIMTW8Q

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.226

218.54.31.165

Targets

    • Target

      0bf5f3c1f48917dfd51c9e6e662dbdcf

    • Size

      782KB

    • MD5

      0bf5f3c1f48917dfd51c9e6e662dbdcf

    • SHA1

      0dece3a9762f60c8b326bd5800cb9d54555b58d5

    • SHA256

      d8be9d9de7092b85a892a31146662759a7f2714e246c2cf1700ae48c9c4c4870

    • SHA512

      12904b98247451e63aadf9195b547d5605c55a17d1ffb01250bec171844ecc629da26568cc7580a814be04c13b30a0682cd63333e15b342748eba222f74d588b

    • SSDEEP

      12288:YOlx4kk9HKda4YfM/1T3PPSnPI2VAWNDTJHq9DIMTW8c1V:YA4Ya1fQzPPSnPFqWtTJK9DIMTW8Q

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks