General

  • Target

    be205584c7b2220502fdaebfc1489ed0

  • Size

    530KB

  • Sample

    240310-karvfagc47

  • MD5

    be205584c7b2220502fdaebfc1489ed0

  • SHA1

    cb65c4b3d373c3a87ba1c250bb1263b2017041c8

  • SHA256

    e177f61255b04603791ffa3f9cc39cea443f4353abfd182bb480b0f52cbb3886

  • SHA512

    9cd1cc071df5d4fd3eda63bbfafe3afe7fea0741c10d8d8df9d664e6655e78f125f9652dc052f1b084966a10c9d1bfe3296ace750cd77a55769465e4a23c5bfd

  • SSDEEP

    12288:cdBNKTCqqwXCcdgTw9+MvA+BisqYpxHte1oSg:cLjQC+bs0Yo

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.226

218.54.31.165

Targets

    • Target

      be205584c7b2220502fdaebfc1489ed0

    • Size

      530KB

    • MD5

      be205584c7b2220502fdaebfc1489ed0

    • SHA1

      cb65c4b3d373c3a87ba1c250bb1263b2017041c8

    • SHA256

      e177f61255b04603791ffa3f9cc39cea443f4353abfd182bb480b0f52cbb3886

    • SHA512

      9cd1cc071df5d4fd3eda63bbfafe3afe7fea0741c10d8d8df9d664e6655e78f125f9652dc052f1b084966a10c9d1bfe3296ace750cd77a55769465e4a23c5bfd

    • SSDEEP

      12288:cdBNKTCqqwXCcdgTw9+MvA+BisqYpxHte1oSg:cLjQC+bs0Yo

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks