General

  • Target

    c62f2715f7d498a3f82a0d826664ff94

  • Size

    535KB

  • Sample

    240313-sgr3saga9w

  • MD5

    c62f2715f7d498a3f82a0d826664ff94

  • SHA1

    40f6bb977f14e6f3600d781873a0bee5db8abd2c

  • SHA256

    d543f7a9aaf7cdfe845d94ba02ec24e243c8ad8941f73ba620ebcc6e70129272

  • SHA512

    2a1ba05dfa39ecdb37f05865147291a1bebc75228631b0e7b5695938831f39c05e54d1b38c83a673d040fe2ca6a3889ffd00f946542037dafb32a46de0cdcc58

  • SSDEEP

    12288:q0nPhglq2Uyt4R/b2G/0hznQGoexBU/NPE:q0P/k4lb2wKatE

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

Targets

    • Target

      c62f2715f7d498a3f82a0d826664ff94

    • Size

      535KB

    • MD5

      c62f2715f7d498a3f82a0d826664ff94

    • SHA1

      40f6bb977f14e6f3600d781873a0bee5db8abd2c

    • SHA256

      d543f7a9aaf7cdfe845d94ba02ec24e243c8ad8941f73ba620ebcc6e70129272

    • SHA512

      2a1ba05dfa39ecdb37f05865147291a1bebc75228631b0e7b5695938831f39c05e54d1b38c83a673d040fe2ca6a3889ffd00f946542037dafb32a46de0cdcc58

    • SSDEEP

      12288:q0nPhglq2Uyt4R/b2G/0hznQGoexBU/NPE:q0P/k4lb2wKatE

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks