General

  • Target

    615e8c64728f8a5431988130a77406b9ae579e78a8552a9be642fb20d28953bd

  • Size

    69KB

  • Sample

    240622-2r8b7ascqr

  • MD5

    0c627bf8a135bd27c4cb684f6cf04ca9

  • SHA1

    80b5caed48062fb4c450850db031ad90f1bc6a97

  • SHA256

    615e8c64728f8a5431988130a77406b9ae579e78a8552a9be642fb20d28953bd

  • SHA512

    d7dd7df68107486712fe2241c25c469c81687c8ce3a6ce7ee8d4dfc6b8cb01b04663e1a5213f50b306057b0364a993c4bb3fb9e62e50f4d08b7e3d9ef918e65d

  • SSDEEP

    1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCarawU:yLAYUzmdD0sMQl7d7IuhCaeX

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      615e8c64728f8a5431988130a77406b9ae579e78a8552a9be642fb20d28953bd

    • Size

      69KB

    • MD5

      0c627bf8a135bd27c4cb684f6cf04ca9

    • SHA1

      80b5caed48062fb4c450850db031ad90f1bc6a97

    • SHA256

      615e8c64728f8a5431988130a77406b9ae579e78a8552a9be642fb20d28953bd

    • SHA512

      d7dd7df68107486712fe2241c25c469c81687c8ce3a6ce7ee8d4dfc6b8cb01b04663e1a5213f50b306057b0364a993c4bb3fb9e62e50f4d08b7e3d9ef918e65d

    • SSDEEP

      1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCarawU:yLAYUzmdD0sMQl7d7IuhCaeX

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks