General

  • Target

    7dd7b6a667031cd0111f52030ec40cd7c4211db41151e00216e13468eca53d70

  • Size

    273KB

  • Sample

    240405-3blc6afc42

  • MD5

    13b40651cf36be5fc7fbf3b2df822414

  • SHA1

    169b7b1e6ecf7b8881662e5cde758873e31d687c

  • SHA256

    7dd7b6a667031cd0111f52030ec40cd7c4211db41151e00216e13468eca53d70

  • SHA512

    52de5bce9e127433ef2568f51337b9963ea11ff66e0d5ff3be2d1d03f2925f870050ad4904bd00f6ba735e70ae1eabc903e3a7b3fa5b2319245712626a559638

  • SSDEEP

    3072:pp56zRJ83+OJ7NoGvdwWy6k04yW/KME0jj0O:pOzRWu27dlOd5W07

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      7dd7b6a667031cd0111f52030ec40cd7c4211db41151e00216e13468eca53d70

    • Size

      273KB

    • MD5

      13b40651cf36be5fc7fbf3b2df822414

    • SHA1

      169b7b1e6ecf7b8881662e5cde758873e31d687c

    • SHA256

      7dd7b6a667031cd0111f52030ec40cd7c4211db41151e00216e13468eca53d70

    • SHA512

      52de5bce9e127433ef2568f51337b9963ea11ff66e0d5ff3be2d1d03f2925f870050ad4904bd00f6ba735e70ae1eabc903e3a7b3fa5b2319245712626a559638

    • SSDEEP

      3072:pp56zRJ83+OJ7NoGvdwWy6k04yW/KME0jj0O:pOzRWu27dlOd5W07

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks