General

  • Target

    c0ea1f02d98705fa23f0f37da08b0b14

  • Size

    207KB

  • Sample

    240311-smq3nsaa59

  • MD5

    c0ea1f02d98705fa23f0f37da08b0b14

  • SHA1

    5a688d0be7e642aa3d7541252b9b59cf0ba217f2

  • SHA256

    69e8d0b8e0fc8511858eabb85e1d4b5d23eaa9b3dd8adbf96b681aa1476b9cec

  • SHA512

    3d445a1a2234affe526ce3c6f119291fb731c846706e1b0c7d6608c9bc0ce8864f167e552761cba109015576c95b9cdf152d35a3d3734649cf3c785ce496ea3e

  • SSDEEP

    1536:1BucKHs7K2HEG7BpoWiZBYHs977q+7INVdU2Aneb61TVcz+3MJb6rcR6:PuchogM57bIL+eb61TVa+3MJb61

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.208

112.175.88.209

112.175.88.207

Targets

    • Target

      c0ea1f02d98705fa23f0f37da08b0b14

    • Size

      207KB

    • MD5

      c0ea1f02d98705fa23f0f37da08b0b14

    • SHA1

      5a688d0be7e642aa3d7541252b9b59cf0ba217f2

    • SHA256

      69e8d0b8e0fc8511858eabb85e1d4b5d23eaa9b3dd8adbf96b681aa1476b9cec

    • SHA512

      3d445a1a2234affe526ce3c6f119291fb731c846706e1b0c7d6608c9bc0ce8864f167e552761cba109015576c95b9cdf152d35a3d3734649cf3c785ce496ea3e

    • SSDEEP

      1536:1BucKHs7K2HEG7BpoWiZBYHs977q+7INVdU2Aneb61TVcz+3MJb6rcR6:PuchogM57bIL+eb61TVa+3MJb61

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks