General

  • Target

    2d466d012e3d3f8ce5f3e706819fee38a007da22dc1a4d783155d3a48109677f

  • Size

    429KB

  • Sample

    240309-1dlqlabe9z

  • MD5

    9294bd2ca427009b82d25fbfeb5667ea

  • SHA1

    3c2ed17e6ecc8fce2b986e336632cd3701928069

  • SHA256

    2d466d012e3d3f8ce5f3e706819fee38a007da22dc1a4d783155d3a48109677f

  • SHA512

    7da486dab91cd309ca55c16049a8eb7bd156adf8e998e6d57b4c54dc44c988254449b71741328ef650080207df2f64f367d8b545cbc4b44cf8a9e5fb4444a022

  • SSDEEP

    6144:UzU7blKaP2iCWhWapKRaRXOkN4Swel6f3IuODGLJGHf:uU7M5ijWh0XOW4sEfHOD

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

Targets

    • Target

      2d466d012e3d3f8ce5f3e706819fee38a007da22dc1a4d783155d3a48109677f

    • Size

      429KB

    • MD5

      9294bd2ca427009b82d25fbfeb5667ea

    • SHA1

      3c2ed17e6ecc8fce2b986e336632cd3701928069

    • SHA256

      2d466d012e3d3f8ce5f3e706819fee38a007da22dc1a4d783155d3a48109677f

    • SHA512

      7da486dab91cd309ca55c16049a8eb7bd156adf8e998e6d57b4c54dc44c988254449b71741328ef650080207df2f64f367d8b545cbc4b44cf8a9e5fb4444a022

    • SSDEEP

      6144:UzU7blKaP2iCWhWapKRaRXOkN4Swel6f3IuODGLJGHf:uU7M5ijWh0XOW4sEfHOD

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks