General

  • Target

    131cb9e0d30d9ea4b5cb85ba049d7787

  • Size

    536KB

  • Sample

    231230-j4hcesbab5

  • MD5

    131cb9e0d30d9ea4b5cb85ba049d7787

  • SHA1

    0951478224d75a98cd98511e6f1b911f20f66e42

  • SHA256

    41650b2d2e134e521c54fa3523fc261783954a8a75123e1f899ff9b39ec1a4e2

  • SHA512

    6208e1abc202b2f830b7167ea58a588fa5a7b541578968a9e33fd6a5589b73872909be3c219ed6ba543300849247ab748a27d807a4318c994ec3a1c4f5ed2485

  • SSDEEP

    12288:q0nPhglq2Uyt4R/b2G/0hznQGoexBU/NP7:q0P/k4lb2wKat7

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

Targets

    • Target

      131cb9e0d30d9ea4b5cb85ba049d7787

    • Size

      536KB

    • MD5

      131cb9e0d30d9ea4b5cb85ba049d7787

    • SHA1

      0951478224d75a98cd98511e6f1b911f20f66e42

    • SHA256

      41650b2d2e134e521c54fa3523fc261783954a8a75123e1f899ff9b39ec1a4e2

    • SHA512

      6208e1abc202b2f830b7167ea58a588fa5a7b541578968a9e33fd6a5589b73872909be3c219ed6ba543300849247ab748a27d807a4318c994ec3a1c4f5ed2485

    • SSDEEP

      12288:q0nPhglq2Uyt4R/b2G/0hznQGoexBU/NP7:q0P/k4lb2wKat7

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks