General

  • Target

    c0fe9bd0c8b53673069794cdfe3c3e55

  • Size

    348KB

  • Sample

    240311-tdsetaag99

  • MD5

    c0fe9bd0c8b53673069794cdfe3c3e55

  • SHA1

    c2fb7d917fb9a55bcf76d23b2718bf869f435401

  • SHA256

    352e47d9fe7b3b74e35e0f277f3403168bc9aaa9ff65349c54340c3320968929

  • SHA512

    82e6b1b49e78ffbeb0ab8a117e07916bacc3c1282c9c1435de860905f6a2ae7953159ed4b20eb60d8359eb9c30dae82075576996b8092c37ec43cf9255cd9a6e

  • SSDEEP

    6144:E/bE5G5KiR0J0dCsnGb/6VOpLc91WlvhDSNZU:Y0G5obGGraOpUWlpX

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

Targets

    • Target

      c0fe9bd0c8b53673069794cdfe3c3e55

    • Size

      348KB

    • MD5

      c0fe9bd0c8b53673069794cdfe3c3e55

    • SHA1

      c2fb7d917fb9a55bcf76d23b2718bf869f435401

    • SHA256

      352e47d9fe7b3b74e35e0f277f3403168bc9aaa9ff65349c54340c3320968929

    • SHA512

      82e6b1b49e78ffbeb0ab8a117e07916bacc3c1282c9c1435de860905f6a2ae7953159ed4b20eb60d8359eb9c30dae82075576996b8092c37ec43cf9255cd9a6e

    • SSDEEP

      6144:E/bE5G5KiR0J0dCsnGb/6VOpLc91WlvhDSNZU:Y0G5obGGraOpUWlpX

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks