General

  • Target

    473e3997a40edcac6d110d74aeee9ed8.bin

  • Size

    402KB

  • Sample

    240108-czrlzaagd7

  • MD5

    473e3997a40edcac6d110d74aeee9ed8

  • SHA1

    d9551161a90862baa75f9daa09db73c3cbb00a17

  • SHA256

    fac206cdd8a6921c7dbb82a94cf5607fe748a801a8c38c28dda15ac271d54528

  • SHA512

    e95bd8b4d4c69bd2f3bb97aced05055ac15201c03828266aa38ae2d06be7dc06084d4ce120402898326e0c9a27fd249776ff4181a27fd204feb07bc30e915428

  • SSDEEP

    6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohd:8IfBoDWoyFblU6hAJQnOz

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      473e3997a40edcac6d110d74aeee9ed8.bin

    • Size

      402KB

    • MD5

      473e3997a40edcac6d110d74aeee9ed8

    • SHA1

      d9551161a90862baa75f9daa09db73c3cbb00a17

    • SHA256

      fac206cdd8a6921c7dbb82a94cf5607fe748a801a8c38c28dda15ac271d54528

    • SHA512

      e95bd8b4d4c69bd2f3bb97aced05055ac15201c03828266aa38ae2d06be7dc06084d4ce120402898326e0c9a27fd249776ff4181a27fd204feb07bc30e915428

    • SSDEEP

      6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohd:8IfBoDWoyFblU6hAJQnOz

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks