General

  • Target

    b4f77849fbbe0a66cdb8cd210153bec1

  • Size

    401KB

  • Sample

    240305-r8kbksac99

  • MD5

    b4f77849fbbe0a66cdb8cd210153bec1

  • SHA1

    55ba8156c505fa2b7da672ab00ea0c134f70c942

  • SHA256

    704e7cac0f7167070b5cf19a36970c509178c8149b809722f04ec1c71c9fff61

  • SHA512

    15ceacdfa56f7cc9a2bd3c586f1640b2c56d3ace910a63d757e55f5b45884b208780e3a850316129cb34a4aaad00388d265f6b5bc8db867da4b68c3e9ff7e052

  • SSDEEP

    6144:GzU7blKaP2iCWhWapKRaRXOkN4Swel6f3IsInOW:oU7M5ijWh0XOW4sEfeOW

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

Targets

    • Target

      b4f77849fbbe0a66cdb8cd210153bec1

    • Size

      401KB

    • MD5

      b4f77849fbbe0a66cdb8cd210153bec1

    • SHA1

      55ba8156c505fa2b7da672ab00ea0c134f70c942

    • SHA256

      704e7cac0f7167070b5cf19a36970c509178c8149b809722f04ec1c71c9fff61

    • SHA512

      15ceacdfa56f7cc9a2bd3c586f1640b2c56d3ace910a63d757e55f5b45884b208780e3a850316129cb34a4aaad00388d265f6b5bc8db867da4b68c3e9ff7e052

    • SSDEEP

      6144:GzU7blKaP2iCWhWapKRaRXOkN4Swel6f3IsInOW:oU7M5ijWh0XOW4sEfeOW

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks