General

  • Target

    d84041eca0858276599f1048ad508174f1c7b921b515d2e479ac6bf2af0092c0

  • Size

    368KB

  • Sample

    240628-dqbd3a1cjr

  • MD5

    b725608c76d7a01dc966c2707604e459

  • SHA1

    5e31cf379c12e2f3582fb4df5ade53ab660af3ed

  • SHA256

    d84041eca0858276599f1048ad508174f1c7b921b515d2e479ac6bf2af0092c0

  • SHA512

    14e17966aa916da982ffe5ac71857aea1a0f78715b94d9a9926645f094856647b04a6b312d2292702dc95c466f3c3723854677bce1b579a841d137ec26447ade

  • SSDEEP

    6144:1o3whi+1Py3V0a24kOn+Sr72iyjmhuKtUYiw52hVOcvBRMHkWYHpf:YKf1PyKa2anKjm3OYZ2hocvHt

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.165

218.54.31.226

Targets

    • Target

      d84041eca0858276599f1048ad508174f1c7b921b515d2e479ac6bf2af0092c0

    • Size

      368KB

    • MD5

      b725608c76d7a01dc966c2707604e459

    • SHA1

      5e31cf379c12e2f3582fb4df5ade53ab660af3ed

    • SHA256

      d84041eca0858276599f1048ad508174f1c7b921b515d2e479ac6bf2af0092c0

    • SHA512

      14e17966aa916da982ffe5ac71857aea1a0f78715b94d9a9926645f094856647b04a6b312d2292702dc95c466f3c3723854677bce1b579a841d137ec26447ade

    • SSDEEP

      6144:1o3whi+1Py3V0a24kOn+Sr72iyjmhuKtUYiw52hVOcvBRMHkWYHpf:YKf1PyKa2anKjm3OYZ2hocvHt

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Tasks