General

  • Target

    3f555335d44832df4f6be29db376b4abb82c7a2b0c97535fd2df9c43ac70fdad

  • Size

    69KB

  • Sample

    240709-1cwjeaxakk

  • MD5

    8f28c0215ea28d3ce4d181b7cd5206e6

  • SHA1

    e32e034cb0fa993539bef7e81c70d98e819e2431

  • SHA256

    3f555335d44832df4f6be29db376b4abb82c7a2b0c97535fd2df9c43ac70fdad

  • SHA512

    9a24df57bde11a86c4bd509e83491005d95aaed64a2f4369eab973b4a876d338948dc44e6a340c01602772faa36a677faaedebcb3a9779c4d5e8d799e2cbd427

  • SSDEEP

    1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCaraww:yLAYUzmdD0sMQl7d7IuhCaef

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      3f555335d44832df4f6be29db376b4abb82c7a2b0c97535fd2df9c43ac70fdad

    • Size

      69KB

    • MD5

      8f28c0215ea28d3ce4d181b7cd5206e6

    • SHA1

      e32e034cb0fa993539bef7e81c70d98e819e2431

    • SHA256

      3f555335d44832df4f6be29db376b4abb82c7a2b0c97535fd2df9c43ac70fdad

    • SHA512

      9a24df57bde11a86c4bd509e83491005d95aaed64a2f4369eab973b4a876d338948dc44e6a340c01602772faa36a677faaedebcb3a9779c4d5e8d799e2cbd427

    • SSDEEP

      1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCaraww:yLAYUzmdD0sMQl7d7IuhCaef

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks