General

  • Target

    241579ff52743523cf5cb6a1cff63a7cfab869f3000593a3a88aa89061d0fb17

  • Size

    308KB

  • Sample

    240701-yedehawbld

  • MD5

    0c7f2705b8b8579ef2e66ae106918bb6

  • SHA1

    dfd1a2c305bbd96be8901c7e5c17db39ea0d6c99

  • SHA256

    241579ff52743523cf5cb6a1cff63a7cfab869f3000593a3a88aa89061d0fb17

  • SHA512

    029ea391e60cc0f97e55fd8e9f27fbf6aa1493939c1335d2befb556a919a5b9cb442d6621af81178ef8446ca45fd87bdcb619e8af6ead92739c25b75bcaac96c

  • SSDEEP

    3072:dQisJFjI/DmZwx0eJSUbx3ECbZS42t8sJ4yYdfp4Qz28h+0W6Y4704jGopBhjo:dQi+reSUbnbA8VKQq8hpW6p75PpBhjo

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      241579ff52743523cf5cb6a1cff63a7cfab869f3000593a3a88aa89061d0fb17

    • Size

      308KB

    • MD5

      0c7f2705b8b8579ef2e66ae106918bb6

    • SHA1

      dfd1a2c305bbd96be8901c7e5c17db39ea0d6c99

    • SHA256

      241579ff52743523cf5cb6a1cff63a7cfab869f3000593a3a88aa89061d0fb17

    • SHA512

      029ea391e60cc0f97e55fd8e9f27fbf6aa1493939c1335d2befb556a919a5b9cb442d6621af81178ef8446ca45fd87bdcb619e8af6ead92739c25b75bcaac96c

    • SSDEEP

      3072:dQisJFjI/DmZwx0eJSUbx3ECbZS42t8sJ4yYdfp4Qz28h+0W6Y4704jGopBhjo:dQi+reSUbnbA8VKQq8hpW6p75PpBhjo

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks