General

  • Target

    de42e7e0382a534dfbf940e3217401485672d27554c46b08239d71c8df0aa5c1

  • Size

    66KB

  • Sample

    240623-e1gt9stcnl

  • MD5

    3249d05491763fe671eb6158a8e7c1ce

  • SHA1

    1256dd6f0ee7f5c35a9f025c2ef57e95260f578a

  • SHA256

    de42e7e0382a534dfbf940e3217401485672d27554c46b08239d71c8df0aa5c1

  • SHA512

    008e244778a4e6b61d455cdb2e65c65029a6afb05673a9640f9bb24ffb510e72814f87914402630b2ba8149595a7b1ec14951f1dfcd93054e60fff59a5fd4e04

  • SSDEEP

    1536:04/WgLAjdZsp+uChoLnDeoqYAJjvLFymnHsPZ:l//AjMp+u2onejH2PZ

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      de42e7e0382a534dfbf940e3217401485672d27554c46b08239d71c8df0aa5c1

    • Size

      66KB

    • MD5

      3249d05491763fe671eb6158a8e7c1ce

    • SHA1

      1256dd6f0ee7f5c35a9f025c2ef57e95260f578a

    • SHA256

      de42e7e0382a534dfbf940e3217401485672d27554c46b08239d71c8df0aa5c1

    • SHA512

      008e244778a4e6b61d455cdb2e65c65029a6afb05673a9640f9bb24ffb510e72814f87914402630b2ba8149595a7b1ec14951f1dfcd93054e60fff59a5fd4e04

    • SSDEEP

      1536:04/WgLAjdZsp+uChoLnDeoqYAJjvLFymnHsPZ:l//AjMp+u2onejH2PZ

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks