General

  • Target

    9dbdb6701a1cddf57b8b437e0aaa48b1134306e313becff62a76b6a5f37ddd37

  • Size

    520KB

  • Sample

    240425-bk8q9scf63

  • MD5

    7aeb4fb5521d15566fbc495db4b72cc1

  • SHA1

    a0239f1af6ce25d4e4837a9ff7ef1ee03a11c11b

  • SHA256

    9dbdb6701a1cddf57b8b437e0aaa48b1134306e313becff62a76b6a5f37ddd37

  • SHA512

    c3eec6503f28ee2af019ea9db49987ab5cc69737816351e6c060c7504d7566163ea45d5559a805a60f43753d27738b4c2395894d47afd43bab626984243bb22d

  • SSDEEP

    12288:1dOLKTCqqwXCcdgT89+MvA+BisqYpxHtW:1AlQC+fs0M

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.226

218.54.31.165

Targets

    • Target

      9dbdb6701a1cddf57b8b437e0aaa48b1134306e313becff62a76b6a5f37ddd37

    • Size

      520KB

    • MD5

      7aeb4fb5521d15566fbc495db4b72cc1

    • SHA1

      a0239f1af6ce25d4e4837a9ff7ef1ee03a11c11b

    • SHA256

      9dbdb6701a1cddf57b8b437e0aaa48b1134306e313becff62a76b6a5f37ddd37

    • SHA512

      c3eec6503f28ee2af019ea9db49987ab5cc69737816351e6c060c7504d7566163ea45d5559a805a60f43753d27738b4c2395894d47afd43bab626984243bb22d

    • SSDEEP

      12288:1dOLKTCqqwXCcdgT89+MvA+BisqYpxHtW:1AlQC+fs0M

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks