General

  • Target

    75bb7e05ffc7fe06b9ca1948ea4ed32607cb56b29ccaaf65fd288deb159d3f18

  • Size

    149KB

  • Sample

    240520-3zgpwacb5t

  • MD5

    2161d47a13edf72c40953d0ce04f5c5e

  • SHA1

    aa5b325b66b6ea3b4e02e0a35225431b61b454c7

  • SHA256

    75bb7e05ffc7fe06b9ca1948ea4ed32607cb56b29ccaaf65fd288deb159d3f18

  • SHA512

    cc8b6d148d6ca7044a5093fe3683e345a6d190e992abc75b794ce79677efd816978c5e8a051bdfb1a3c0f3cd8308353ce41dae673b94a3dad0c67f160d9df570

  • SSDEEP

    1536:m8BpTjAdbGbp9WbtGnQb2fVO2zcpsbLo9ruUWpal3nHPPfTIX65zCtkBSsGu/QyK:m8sSpvo0LKrXEX65etu7v0

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      75bb7e05ffc7fe06b9ca1948ea4ed32607cb56b29ccaaf65fd288deb159d3f18

    • Size

      149KB

    • MD5

      2161d47a13edf72c40953d0ce04f5c5e

    • SHA1

      aa5b325b66b6ea3b4e02e0a35225431b61b454c7

    • SHA256

      75bb7e05ffc7fe06b9ca1948ea4ed32607cb56b29ccaaf65fd288deb159d3f18

    • SHA512

      cc8b6d148d6ca7044a5093fe3683e345a6d190e992abc75b794ce79677efd816978c5e8a051bdfb1a3c0f3cd8308353ce41dae673b94a3dad0c67f160d9df570

    • SSDEEP

      1536:m8BpTjAdbGbp9WbtGnQb2fVO2zcpsbLo9ruUWpal3nHPPfTIX65zCtkBSsGu/QyK:m8sSpvo0LKrXEX65etu7v0

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks