General

  • Target

    5ce85a9350919e6324ee10f69ab0800e

  • Size

    181KB

  • Sample

    231226-je9elsceej

  • MD5

    5ce85a9350919e6324ee10f69ab0800e

  • SHA1

    bf601e2f78cf8bba7f63152a70f5379ce54cc819

  • SHA256

    32d7b1ac33a669a29d58510ded1cf807b5829749d29e4680e335bd2b2c153504

  • SHA512

    5e7846678d855720c290ab9bbc0a59b50d7d304594713b648bb76c19daec3033ac4689a888818f975bfe0144f5a82c5840cec4d174594b343f67420f40272bfa

  • SSDEEP

    3072:z/5KFl81i04l2Fv2f9tMUr6of9MRNwda7KVr0cHneunw1oO:z/5KFl81jDv72RFMReGir0cHneMwqO

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      5ce85a9350919e6324ee10f69ab0800e

    • Size

      181KB

    • MD5

      5ce85a9350919e6324ee10f69ab0800e

    • SHA1

      bf601e2f78cf8bba7f63152a70f5379ce54cc819

    • SHA256

      32d7b1ac33a669a29d58510ded1cf807b5829749d29e4680e335bd2b2c153504

    • SHA512

      5e7846678d855720c290ab9bbc0a59b50d7d304594713b648bb76c19daec3033ac4689a888818f975bfe0144f5a82c5840cec4d174594b343f67420f40272bfa

    • SSDEEP

      3072:z/5KFl81i04l2Fv2f9tMUr6of9MRNwda7KVr0cHneunw1oO:z/5KFl81jDv72RFMReGir0cHneMwqO

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks