General

  • Target

    d8503f293df513b7448ae5c9728f1ce5ae610892a6f70390ec7c2e05d52bd398

  • Size

    321KB

  • Sample

    240602-dyj16shg76

  • MD5

    5b93b43011d2c6d384d3b24c1ccd97ad

  • SHA1

    1fff7b1bb423ca2b054f2407951b52b48ba7c981

  • SHA256

    d8503f293df513b7448ae5c9728f1ce5ae610892a6f70390ec7c2e05d52bd398

  • SHA512

    ca360ad1ab429e80f8541c9dc77754f2559b282421d7bb6780bede3ab34abeae22ce7c921413a3864c6d016e010dce283e576b048335a2b51efd2276501aef96

  • SSDEEP

    6144:PU0USPuHKKAsgBZg178Z+Snk6Fpwlw8RmuZSz8VdPbMK95BL7jGjFUHpJ+MBh:2SPXSzJSk6FpwlzmupVdjx5B/mFYJ+M

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

Targets

    • Target

      d8503f293df513b7448ae5c9728f1ce5ae610892a6f70390ec7c2e05d52bd398

    • Size

      321KB

    • MD5

      5b93b43011d2c6d384d3b24c1ccd97ad

    • SHA1

      1fff7b1bb423ca2b054f2407951b52b48ba7c981

    • SHA256

      d8503f293df513b7448ae5c9728f1ce5ae610892a6f70390ec7c2e05d52bd398

    • SHA512

      ca360ad1ab429e80f8541c9dc77754f2559b282421d7bb6780bede3ab34abeae22ce7c921413a3864c6d016e010dce283e576b048335a2b51efd2276501aef96

    • SSDEEP

      6144:PU0USPuHKKAsgBZg178Z+Snk6Fpwlw8RmuZSz8VdPbMK95BL7jGjFUHpJ+MBh:2SPXSzJSk6FpwlzmupVdjx5B/mFYJ+M

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Tasks