General

  • Target

    8d377e916550cbbb3674bdaae0bdf310

  • Size

    447KB

  • Sample

    240203-yq98lsbebk

  • MD5

    8d377e916550cbbb3674bdaae0bdf310

  • SHA1

    283e7aaeb4951b5e9917639ec0fd246fb7f04549

  • SHA256

    5e51ec6a43a402ee98888f9c65b542f297a924dc79813b1b3ebe7e06287d205b

  • SHA512

    51b6679b77a2b839317eac482740bd6b4e298f0f1c666e7f5be1bd71e6b1fa22da6e9e946d3bed0f5914c74d459d175985696cce2fe0fcffbf219f4f55e38d61

  • SSDEEP

    6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFV:CMpASIcWYx2U6hAJQnS

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      8d377e916550cbbb3674bdaae0bdf310

    • Size

      447KB

    • MD5

      8d377e916550cbbb3674bdaae0bdf310

    • SHA1

      283e7aaeb4951b5e9917639ec0fd246fb7f04549

    • SHA256

      5e51ec6a43a402ee98888f9c65b542f297a924dc79813b1b3ebe7e06287d205b

    • SHA512

      51b6679b77a2b839317eac482740bd6b4e298f0f1c666e7f5be1bd71e6b1fa22da6e9e946d3bed0f5914c74d459d175985696cce2fe0fcffbf219f4f55e38d61

    • SSDEEP

      6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFV:CMpASIcWYx2U6hAJQnS

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks