General

  • Target

    8e735f9bbc68a415ae9496fc7e2f7c530e4fd3fd485f3ae0a6128188e6d1b192

  • Size

    63KB

  • Sample

    240711-b9vkyasdjl

  • MD5

    0ba209122941a9ef2346cd6ec6bae9fd

  • SHA1

    0fe920efbb3934f3e4693b637f3f811d2b6d22af

  • SHA256

    8e735f9bbc68a415ae9496fc7e2f7c530e4fd3fd485f3ae0a6128188e6d1b192

  • SHA512

    e0ff4a1a73eb449c6bcfda4fed92c6fe8da990a300b348358ad3ea667161ffaa331e5891a50945e6ca064c42d100e7301a8a79afcba84505bb069dd0d95a16d9

  • SSDEEP

    1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTmq:6bQRSHpAvzyf7MzeTR

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      8e735f9bbc68a415ae9496fc7e2f7c530e4fd3fd485f3ae0a6128188e6d1b192

    • Size

      63KB

    • MD5

      0ba209122941a9ef2346cd6ec6bae9fd

    • SHA1

      0fe920efbb3934f3e4693b637f3f811d2b6d22af

    • SHA256

      8e735f9bbc68a415ae9496fc7e2f7c530e4fd3fd485f3ae0a6128188e6d1b192

    • SHA512

      e0ff4a1a73eb449c6bcfda4fed92c6fe8da990a300b348358ad3ea667161ffaa331e5891a50945e6ca064c42d100e7301a8a79afcba84505bb069dd0d95a16d9

    • SSDEEP

      1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTmq:6bQRSHpAvzyf7MzeTR

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks