General

  • Target

    a1092881155acdbb3bc6ec80c4817aefdf421486dd7a3ed768da45a9bdbdec29

  • Size

    62KB

  • Sample

    240620-bm536a1amc

  • MD5

    e256efc0b1ac19a63d82f6a16ce8a7f6

  • SHA1

    0be73fbe57906ff03feb9a30de6b6ae4774f4c64

  • SHA256

    a1092881155acdbb3bc6ec80c4817aefdf421486dd7a3ed768da45a9bdbdec29

  • SHA512

    392d82f6cd8a15f98c4424bb485df89841472426811ac62456c47a38ad75b65a80248b5b839ffc847770b1893973bec03000047672da391840bed8ce7ae18a4a

  • SSDEEP

    1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTmv:6bQRSHpAvzyf7MzeTK

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      a1092881155acdbb3bc6ec80c4817aefdf421486dd7a3ed768da45a9bdbdec29

    • Size

      62KB

    • MD5

      e256efc0b1ac19a63d82f6a16ce8a7f6

    • SHA1

      0be73fbe57906ff03feb9a30de6b6ae4774f4c64

    • SHA256

      a1092881155acdbb3bc6ec80c4817aefdf421486dd7a3ed768da45a9bdbdec29

    • SHA512

      392d82f6cd8a15f98c4424bb485df89841472426811ac62456c47a38ad75b65a80248b5b839ffc847770b1893973bec03000047672da391840bed8ce7ae18a4a

    • SSDEEP

      1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTmv:6bQRSHpAvzyf7MzeTK

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks