General

  • Target

    651890228e0600032e87a97afd9351eea05f0473918513e4fcdfbdc0e4fb10c6

  • Size

    417KB

  • Sample

    240312-z5ssjsah8x

  • MD5

    f1711791cd5a046b0b6b840b832a99e2

  • SHA1

    460ce3c2310440ad1f7fc14fa250bee46df852d1

  • SHA256

    651890228e0600032e87a97afd9351eea05f0473918513e4fcdfbdc0e4fb10c6

  • SHA512

    30c87873a4e087d5a9ed1107381b1f1465037bf1eda31047409874d24e11c38b066bac85284abaa2d6169f40f7ed42f1bf5c5b9939be68d56199f35ea38fe17a

  • SSDEEP

    6144:y5SXvBoDWoyLYyzbpPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrBw/ib:yIfBoDWoyFboU6hAJQnrMQ

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      651890228e0600032e87a97afd9351eea05f0473918513e4fcdfbdc0e4fb10c6

    • Size

      417KB

    • MD5

      f1711791cd5a046b0b6b840b832a99e2

    • SHA1

      460ce3c2310440ad1f7fc14fa250bee46df852d1

    • SHA256

      651890228e0600032e87a97afd9351eea05f0473918513e4fcdfbdc0e4fb10c6

    • SHA512

      30c87873a4e087d5a9ed1107381b1f1465037bf1eda31047409874d24e11c38b066bac85284abaa2d6169f40f7ed42f1bf5c5b9939be68d56199f35ea38fe17a

    • SSDEEP

      6144:y5SXvBoDWoyLYyzbpPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrBw/ib:yIfBoDWoyFboU6hAJQnrMQ

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks