General

  • Target

    3acb5bb9fda51fa3ab0a140557827dfa

  • Size

    235KB

  • Sample

    231231-xkpt2sehf7

  • MD5

    3acb5bb9fda51fa3ab0a140557827dfa

  • SHA1

    7c4b46d51217b769cf77354efb6aa3ebfb2da8a9

  • SHA256

    e6114989f8f8925c40f72aeda9791ac89effd4ff8097aea617e3d43254604245

  • SHA512

    8baeda5dc629dbd9bad255f0deb26d71a29c2ffbc49d7883bc6e5e42adb59c60544b5f688f6efac0201a04f494e566cd23936d908507ff44f246ee88fc809938

  • SSDEEP

    3072:K8ASpvo0LKrXEX65ezpxJ2kbJ7mv73E2o/9sY2K:ZASpvo0LKkRzpxJ2kRqroiK

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      3acb5bb9fda51fa3ab0a140557827dfa

    • Size

      235KB

    • MD5

      3acb5bb9fda51fa3ab0a140557827dfa

    • SHA1

      7c4b46d51217b769cf77354efb6aa3ebfb2da8a9

    • SHA256

      e6114989f8f8925c40f72aeda9791ac89effd4ff8097aea617e3d43254604245

    • SHA512

      8baeda5dc629dbd9bad255f0deb26d71a29c2ffbc49d7883bc6e5e42adb59c60544b5f688f6efac0201a04f494e566cd23936d908507ff44f246ee88fc809938

    • SSDEEP

      3072:K8ASpvo0LKrXEX65ezpxJ2kbJ7mv73E2o/9sY2K:ZASpvo0LKkRzpxJ2kRqroiK

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks