General

  • Target

    280c7e5e80f64eedb39a7f127914506f

  • Size

    59KB

  • Sample

    231219-p1hrnshaf2

  • MD5

    280c7e5e80f64eedb39a7f127914506f

  • SHA1

    356d8ff0f5147c3fe939237c23a5cc2f9e6e282b

  • SHA256

    fd7760ce94ba85196753109ca9b31e1b0b272d22a559accc7ac5b409d88b8968

  • SHA512

    58bedb76328cd5334a830c59fc9af7f53f36225438fca100b71b5ee58c6b3bc66e99ab0c3ae51ab991ced88ff4dc97ed03c0d8e7d588ca0a9b34d7c4eebfb79b

  • SSDEEP

    768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxP2:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdN

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      280c7e5e80f64eedb39a7f127914506f

    • Size

      59KB

    • MD5

      280c7e5e80f64eedb39a7f127914506f

    • SHA1

      356d8ff0f5147c3fe939237c23a5cc2f9e6e282b

    • SHA256

      fd7760ce94ba85196753109ca9b31e1b0b272d22a559accc7ac5b409d88b8968

    • SHA512

      58bedb76328cd5334a830c59fc9af7f53f36225438fca100b71b5ee58c6b3bc66e99ab0c3ae51ab991ced88ff4dc97ed03c0d8e7d588ca0a9b34d7c4eebfb79b

    • SSDEEP

      768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxP2:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdN

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks