General

  • Target

    adab1da91f10c9bf3e376f0128163a783f8edf5fd8d1deccd604cbc18b49e9db

  • Size

    448KB

  • Sample

    240404-3y8f7seh53

  • MD5

    030cf01cc382eea89b30d91cea2d020f

  • SHA1

    56b6c669ffdf121f4d81507f04c77206cfc55bd1

  • SHA256

    adab1da91f10c9bf3e376f0128163a783f8edf5fd8d1deccd604cbc18b49e9db

  • SHA512

    ffd8f7ef91c53361dd0475c850b1836d7fca3732a0c5660725f9a465fbb90e51339790e96bdfaf7ea51c1c0db4b629d3abc883cac5ba8b8e863e77ef9352448d

  • SSDEEP

    6144:FEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpddOMk:FMpASIcWYx2U6hAJQn2M

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      adab1da91f10c9bf3e376f0128163a783f8edf5fd8d1deccd604cbc18b49e9db

    • Size

      448KB

    • MD5

      030cf01cc382eea89b30d91cea2d020f

    • SHA1

      56b6c669ffdf121f4d81507f04c77206cfc55bd1

    • SHA256

      adab1da91f10c9bf3e376f0128163a783f8edf5fd8d1deccd604cbc18b49e9db

    • SHA512

      ffd8f7ef91c53361dd0475c850b1836d7fca3732a0c5660725f9a465fbb90e51339790e96bdfaf7ea51c1c0db4b629d3abc883cac5ba8b8e863e77ef9352448d

    • SSDEEP

      6144:FEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpddOMk:FMpASIcWYx2U6hAJQn2M

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks