General

  • Target
    ff827a5b7c14cd3dc6f2298b53d0b387bda18d5be9c0756a818f9e2dbf117711
  • Size 320KB
  • Sample240310-cm98jshe84
  • SHA256 ff827a5b7c14cd3dc6f2298b53d0b387bda18d5be9c0756a818f9e2dbf117711
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • urelas

C2
  • 218.54.31.226

  • 218.54.31.165

Targets

    • Target
      ff827a5b7c14cd3dc6f2298b53d0b387bda18d5be9c0756a818f9e2dbf117711
    • Size 320KB
    • SHA256 ff827a5b7c14cd3dc6f2298b53d0b387bda18d5be9c0756a818f9e2dbf117711
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks