General

  • Target

    31555a254dcf98cd954685eec9b7ec334b7c13d642ee95e89dca6136464cd967

  • Size

    443KB

  • Sample

    240310-y3nv5sbb95

  • MD5

    0afca1d50ea4bed7b1dc14f46d2e68c2

  • SHA1

    42c469bce49d60c646450666a577c05f4e8d337c

  • SHA256

    31555a254dcf98cd954685eec9b7ec334b7c13d642ee95e89dca6136464cd967

  • SHA512

    375cc66e42d8f3735cf37817840423d4dabc7b524aef1cf359885f156d34063ec2241d09738119f6a4aa0c1f159308cbaf6a4ba0625ebbc4ed653c3554618b23

  • SSDEEP

    12288:PRMJysYCl64dH0JlJnERCoa8+yx5Yk7SPTANgLML:PRzkF2o5x6RrAym

Score
10/10

Malware Config

Targets

    • Target

      31555a254dcf98cd954685eec9b7ec334b7c13d642ee95e89dca6136464cd967

    • Size

      443KB

    • MD5

      0afca1d50ea4bed7b1dc14f46d2e68c2

    • SHA1

      42c469bce49d60c646450666a577c05f4e8d337c

    • SHA256

      31555a254dcf98cd954685eec9b7ec334b7c13d642ee95e89dca6136464cd967

    • SHA512

      375cc66e42d8f3735cf37817840423d4dabc7b524aef1cf359885f156d34063ec2241d09738119f6a4aa0c1f159308cbaf6a4ba0625ebbc4ed653c3554618b23

    • SSDEEP

      12288:PRMJysYCl64dH0JlJnERCoa8+yx5Yk7SPTANgLML:PRzkF2o5x6RrAym

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks