General

  • Target

    24167efe55b214e6e9b39e6af138467344965da80f14900ee9e9ad3dcd5f2a25

  • Size

    162KB

  • Sample

    240428-x475qsfd7x

  • MD5

    067caeb60f2b5679f8563c7fb7654e02

  • SHA1

    de597fcb21e0a50318f2373d52ca13247fafde4a

  • SHA256

    24167efe55b214e6e9b39e6af138467344965da80f14900ee9e9ad3dcd5f2a25

  • SHA512

    ec8719096abea5d8a5ecb26f258209034e5b136aa5f6c6130fc85da30a04210297fbd55c982732ec6ee49e0ca4d34d6e40089fcbd51c4481a68a492ee79c34dd

  • SSDEEP

    1536:f79TuVtAd6xd6vEi0uxJ7WmjcbLCU+ZcKRtdBIw0vUQwYtMAo0gpy1m3V+oF/:fduV2vj+LocKle1Ft9o0gpem3hF/

Score
10/10

Malware Config

Extracted

Family

urelas

C2

121.88.5.183

218.54.28.139

Targets

    • Target

      24167efe55b214e6e9b39e6af138467344965da80f14900ee9e9ad3dcd5f2a25

    • Size

      162KB

    • MD5

      067caeb60f2b5679f8563c7fb7654e02

    • SHA1

      de597fcb21e0a50318f2373d52ca13247fafde4a

    • SHA256

      24167efe55b214e6e9b39e6af138467344965da80f14900ee9e9ad3dcd5f2a25

    • SHA512

      ec8719096abea5d8a5ecb26f258209034e5b136aa5f6c6130fc85da30a04210297fbd55c982732ec6ee49e0ca4d34d6e40089fcbd51c4481a68a492ee79c34dd

    • SSDEEP

      1536:f79TuVtAd6xd6vEi0uxJ7WmjcbLCU+ZcKRtdBIw0vUQwYtMAo0gpy1m3V+oF/:fduV2vj+LocKle1Ft9o0gpem3hF/

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks