General

  • Target

    74bd986ac84884be3dc537835d5c726f3aa74400ca6f2024df6fceb272b9dae9

  • Size

    485KB

  • Sample

    240325-ybbfqsgc88

  • MD5

    9381517a4c24d290f5f2fa3d1f447cb0

  • SHA1

    a8f37f77012f18bf6e672ce7995cf5111f429e85

  • SHA256

    74bd986ac84884be3dc537835d5c726f3aa74400ca6f2024df6fceb272b9dae9

  • SHA512

    f6beeaffb7f7254bafc0cae15f9f2175ae1eff3ed333ecc0b178a9d29907d901f2fe41b58f615433b13da92bffc6c40e82ba7e70f6e4f51423fef221d1440396

  • SSDEEP

    12288:2pbvglu0agWSFnxAEwKyLH8l+O9H6s2si2XfxKTbc1:2pbXi5xzFUBaazsiofx8u

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.226

218.54.31.165

Targets

    • Target

      74bd986ac84884be3dc537835d5c726f3aa74400ca6f2024df6fceb272b9dae9

    • Size

      485KB

    • MD5

      9381517a4c24d290f5f2fa3d1f447cb0

    • SHA1

      a8f37f77012f18bf6e672ce7995cf5111f429e85

    • SHA256

      74bd986ac84884be3dc537835d5c726f3aa74400ca6f2024df6fceb272b9dae9

    • SHA512

      f6beeaffb7f7254bafc0cae15f9f2175ae1eff3ed333ecc0b178a9d29907d901f2fe41b58f615433b13da92bffc6c40e82ba7e70f6e4f51423fef221d1440396

    • SSDEEP

      12288:2pbvglu0agWSFnxAEwKyLH8l+O9H6s2si2XfxKTbc1:2pbXi5xzFUBaazsiofx8u

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks