General

  • Target

    a3f6052e029a9b1e1b51db79983bbcc70d2cb8cb1ac72d7ad2fb4932dd08fe38

  • Size

    55KB

  • Sample

    240709-dhtknsshln

  • MD5

    a495b30ea6e8f8d53ac6a02405931025

  • SHA1

    6335bbe44c4924519cb58f345add3afcd801f4af

  • SHA256

    a3f6052e029a9b1e1b51db79983bbcc70d2cb8cb1ac72d7ad2fb4932dd08fe38

  • SHA512

    31832b86adb1b465688ab7a2ecc25136b77709c839643c2d793afcad999eac7581734acfc020c37ebed547897c312a61f2adef83b9c125a6dd7b97c551fc0de4

  • SSDEEP

    1536:vMcQYte55zs091Zw9FAGDdJYipvwGf9ogjrgH1:vMhAe5Zs091KI+JYixw49XjrE

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      a3f6052e029a9b1e1b51db79983bbcc70d2cb8cb1ac72d7ad2fb4932dd08fe38

    • Size

      55KB

    • MD5

      a495b30ea6e8f8d53ac6a02405931025

    • SHA1

      6335bbe44c4924519cb58f345add3afcd801f4af

    • SHA256

      a3f6052e029a9b1e1b51db79983bbcc70d2cb8cb1ac72d7ad2fb4932dd08fe38

    • SHA512

      31832b86adb1b465688ab7a2ecc25136b77709c839643c2d793afcad999eac7581734acfc020c37ebed547897c312a61f2adef83b9c125a6dd7b97c551fc0de4

    • SSDEEP

      1536:vMcQYte55zs091Zw9FAGDdJYipvwGf9ogjrgH1:vMhAe5Zs091KI+JYixw49XjrE

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks