General

  • Target

    42d144d5401b0a13204484661bdbb944c21e40469ab7e2a9d57af6f6b4ec609f

  • Size

    407KB

  • Sample

    240310-zknyvsbh71

  • MD5

    d1cf6fd58f7d223c719ef934a5d5978a

  • SHA1

    ce0a431d8defc0c8b2fed009fc21582b9bca8878

  • SHA256

    42d144d5401b0a13204484661bdbb944c21e40469ab7e2a9d57af6f6b4ec609f

  • SHA512

    5a2ed12b477998914fdbb1d236d1417fea43a92ac41fc48786a4d3af5115439ebf0e1dae248522d88b605ef82a35e60de9602b1c652abbdd01ac689b44aecf22

  • SSDEEP

    6144:GkBy7+8pCOVi3L+w6Vg0lnwzBDFqzRoRXOmbvRQ20HV:GUwRpCOVi3aPg0lwzN0RY+mbvr4

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.226

218.54.31.165

Targets

    • Target

      42d144d5401b0a13204484661bdbb944c21e40469ab7e2a9d57af6f6b4ec609f

    • Size

      407KB

    • MD5

      d1cf6fd58f7d223c719ef934a5d5978a

    • SHA1

      ce0a431d8defc0c8b2fed009fc21582b9bca8878

    • SHA256

      42d144d5401b0a13204484661bdbb944c21e40469ab7e2a9d57af6f6b4ec609f

    • SHA512

      5a2ed12b477998914fdbb1d236d1417fea43a92ac41fc48786a4d3af5115439ebf0e1dae248522d88b605ef82a35e60de9602b1c652abbdd01ac689b44aecf22

    • SSDEEP

      6144:GkBy7+8pCOVi3L+w6Vg0lnwzBDFqzRoRXOmbvRQ20HV:GUwRpCOVi3aPg0lwzN0RY+mbvr4

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks