General

  • Target

    0cb71b6fcbddec2c349b9ccaa742e030

  • Size

    509KB

  • Sample

    231224-xch2jahghr

  • MD5

    0cb71b6fcbddec2c349b9ccaa742e030

  • SHA1

    78e3632f4dd80b7b4bde3ac593311aa94a7fef59

  • SHA256

    56cfad78febf1f87650569c7f76b0a40019a12bd5f2413311c63671f0a5261f5

  • SHA512

    3157abc0779c52bd115c745e18c18dffa73e0a91958c1f7a4ded175d503324890efaa24a0f79d5695a8ae1d1d11bd8dcbd12ae4d32e09131ef64714b7d273733

  • SSDEEP

    12288:j/fCEOMsm8nc3qWQ8wqKhb43nLl5tDrXlFV:j/D0caF8wvhb43pDbV

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.226

218.54.30.235

218.54.31.165

Targets

    • Target

      0cb71b6fcbddec2c349b9ccaa742e030

    • Size

      509KB

    • MD5

      0cb71b6fcbddec2c349b9ccaa742e030

    • SHA1

      78e3632f4dd80b7b4bde3ac593311aa94a7fef59

    • SHA256

      56cfad78febf1f87650569c7f76b0a40019a12bd5f2413311c63671f0a5261f5

    • SHA512

      3157abc0779c52bd115c745e18c18dffa73e0a91958c1f7a4ded175d503324890efaa24a0f79d5695a8ae1d1d11bd8dcbd12ae4d32e09131ef64714b7d273733

    • SSDEEP

      12288:j/fCEOMsm8nc3qWQ8wqKhb43nLl5tDrXlFV:j/D0caF8wvhb43pDbV

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks